[JCR-2758] Session.save() potentially causes endless loop when READ permission is denied on root node

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.2
• Component/s: jackrabbit-core
• Assignee: Unassigned
• Reporter: Stefan Guggisberg
• Created: 27/Sep/10 14:42
• Updated: 23/Sep/11 14:23
• Resolved: 27/Sep/10 14:45

Description

if the current session doesn't have read permission on the root node, calling Session.save() triggers a call to SessionItemStateManager.getIdOfRootTransientNodeState()
in order to find the root of the minimal subtree including all transient states. this might cause an endless loop, depending on the transient changes.