[JCR-2977] AccessControlManager#getApplicablePolicy should check for colliding rep:policy node

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.2.7, 2.3
• Component/s: jackrabbit-core, security
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 26/May/11 21:46
• Updated: 08/Nov/11 15:47
• Resolved: 27/May/11 07:53

Description

while AccessControlManager#getApplicablePolicy returns an empty iterator if the target node cannot get the accesscontrollable-mixin set, it does not test if there is a colliding child node that would prevent the policy to be applied calling AccessControlManager#setPolicy. consequently, the setPolicy call fails with ItemExistsException. A simple test upfront could prevent this unexpected failure.