[JCR-2869] AccessControlManager#setPolicy may fail for new applicable policy despite jcr:modifyAccessControl privilege being granted

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2, 2.2.1
• Fix Version/s: 2.2.4
• Component/s: jackrabbit-core, security
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 25/Jan/11 12:44
• Updated: 17/Feb/11 15:49
• Resolved: 26/Jan/11 15:16

Description

the sequence AccessControlManager.getApplicablePolicies -> modify -> AccessControlManager#setPolicy fails
due to bug in AC evaluation if target is an AC-item but not yet existing. in this case the
wrong parent node is used for AC-evaluation.