[JCR-2363] Node.orderBefore does not check permissions - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 2.0-beta3
Component/s: jackrabbit-core, security
Labels:
None

Description

It seems that Node.orderBefore(String, String) does not check if the editing session is allowed to modify the parent, neither immediately nor upon saving the transient changes.

This issue was found by Alexandre Capt. Thanks!

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending

JCR-2363.patch
23/Oct/09 15:53
6 kB
Angela Schreiber

Activity

People

Assignee:: Angela Schreiber

Reporter:: Angela Schreiber

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Dates

Created:: 23/Oct/09 15:49

Updated:: 11/Jan/10 14:16

Resolved:: 29/Oct/09 18:10