jackrabbit-oak-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Fernando Lemes (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (OAK-2810) Cannot copy a node from a parent with restricted access
Date Mon, 03 Aug 2015 16:28:04 GMT

    [ https://issues.apache.org/jira/browse/OAK-2810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14652065#comment-14652065
] 

Fernando Lemes commented on OAK-2810:
-------------------------------------

Hi Michael,

Given a structure like this:

/root/
/root/groupId/
/root/groupId/userId/
/root/groupId/userId/nodeA
/root/groupId/userId/nodeB

In my project a user has access to the nodes nodeA and nodeB (he cannot write on /root/groupId/userId).
If this user tries to copy /root/groupId/userId/nodeA to /root/groupId/userId/nodeB/anotherNodeA
he will receive an exception, but he has rights to read nodeA and write on nodeB. For me it
makes no sense to check the parent permission on the origin node.

> Cannot copy a node from a parent with restricted access
> -------------------------------------------------------
>
>                 Key: OAK-2810
>                 URL: https://issues.apache.org/jira/browse/OAK-2810
>             Project: Jackrabbit Oak
>          Issue Type: Bug
>          Components: jcr
>    Affects Versions: 1.1.8
>            Reporter: Fernando Lemes
>              Labels: easytest, patch-available, security
>         Attachments: patch_to_CopyTest_file.patch
>
>
> If we try to copy a node, in which we have full access, but with no access on the parent
node, the copy operation will throw a PathNotFoundException when evaluating checkProtectedNode(getParentPath("sourceNodePath"))
on the copy() method from org.apache.jackrabbit.oak.jcr.session.WorkspaceImpl



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message