[JCR-2036] Set_property permission not checked when saving a new node

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.3
• Fix Version/s: 1.5.5
• Component/s: jackrabbit-core
• Assignee: Jukka Zitting
• Reporter: Bart van der Schans
• Created: 18/Mar/09 11:27
• Updated: 29/Apr/09 07:50
• Resolved: 23/Apr/09 12:58

Description

When a new node is saved, the add_node permission is checked, but not the set_property permission on it's properties in ItemImpl.validateTransientItems(). This is already fixed in trunk where the implementation is slightly different.