jackrabbit-oak-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Thomas Mueller (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (OAK-5354) Security: the order of child should be correct if the child nodes are readable.
Date Thu, 22 Dec 2016 10:10:58 GMT

    [ https://issues.apache.org/jira/browse/OAK-5354?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15769677#comment-15769677
] 

Thomas Mueller commented on OAK-5354:
-------------------------------------

http://svn.apache.org/r1775605 (improved test case)

> Security: the order of child should be correct if the child nodes are readable.
> -------------------------------------------------------------------------------
>
>                 Key: OAK-5354
>                 URL: https://issues.apache.org/jira/browse/OAK-5354
>             Project: Jackrabbit Oak
>          Issue Type: Bug
>            Reporter: Thomas Mueller
>            Assignee: Thomas Mueller
>             Fix For: 1.5.17, 1.6
>
>
> If access rights are set such that a session can read child nodes of a node, then that
session should also be able to read the child nodes in the right order (for orderable nodes).
Even if the session does not have permission to read the properties of a node.
> The order of child nodes is stored in a hidden property. Access rights for this hidden
property are currently checked in the same way as access rights for regular properties.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message