jackrabbit-oak-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Fernando Lemes (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (OAK-2810) Cannot copy a node from a parent with restricted access
Date Mon, 03 Aug 2015 16:28:04 GMT

    [ https://issues.apache.org/jira/browse/OAK-2810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14652065#comment-14652065

Fernando Lemes commented on OAK-2810:

Hi Michael,

Given a structure like this:


In my project a user has access to the nodes nodeA and nodeB (he cannot write on /root/groupId/userId).
If this user tries to copy /root/groupId/userId/nodeA to /root/groupId/userId/nodeB/anotherNodeA
he will receive an exception, but he has rights to read nodeA and write on nodeB. For me it
makes no sense to check the parent permission on the origin node.

> Cannot copy a node from a parent with restricted access
> -------------------------------------------------------
>                 Key: OAK-2810
>                 URL: https://issues.apache.org/jira/browse/OAK-2810
>             Project: Jackrabbit Oak
>          Issue Type: Bug
>          Components: jcr
>    Affects Versions: 1.1.8
>            Reporter: Fernando Lemes
>              Labels: easytest, patch-available, security
>         Attachments: patch_to_CopyTest_file.patch
> If we try to copy a node, in which we have full access, but with no access on the parent
node, the copy operation will throw a PathNotFoundException when evaluating checkProtectedNode(getParentPath("sourceNodePath"))
on the copy() method from org.apache.jackrabbit.oak.jcr.session.WorkspaceImpl

This message was sent by Atlassian JIRA

View raw message