jackrabbit-oak-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "angela (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (OAK-8155) CompositePermissionProvider: add possibility to abort evaluation
Date Tue, 02 Apr 2019 09:34:00 GMT

    [ https://issues.apache.org/jira/browse/OAK-8155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16807587#comment-16807587
] 

angela commented on OAK-8155:
-----------------------------

[~stillalex], an alternative approach to likely achieve a similar result would be an option
with the default model that allowed for exclude certain paths from the evaluation.

> CompositePermissionProvider: add possibility to abort evaluation
> ----------------------------------------------------------------
>
>                 Key: OAK-8155
>                 URL: https://issues.apache.org/jira/browse/OAK-8155
>             Project: Jackrabbit Oak
>          Issue Type: New Feature
>          Components: security, security-spi
>            Reporter: angela
>            Assignee: angela
>            Priority: Major
>             Fix For: 1.12.0
>
>
> when aggregating multiple authorization models we currently have the ability to choose
between CompositionType.AND and CompositionType.OR for the evaluation of effective permissions.
In other words as soon as more than 1 PermissionProvider is present for the evaluation the
results of that evaluation are either combined in an AND or OR fashion.
> however, we currently lack the ability to stop or abort the evaluation if a given provider
instance was 'sufficient' to determine if a given set of permissions is granted or denied.

> [~stillalex], let's discuss ideas and options on how we could achieve this.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message