[JCR-3412] UserManager.findAuthorizables() does not work, if session does not have read access to /home

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.4
• Component/s: jackrabbit-core, query, security
• Assignee: Unassigned
• Reporter: Tobias Bocanegra
• Created: 18/Aug/12 00:56
• Updated: 03/Jul/13 12:29

Description

If the session does not have read access to /home, the UserManager.findAuthorizables() does not find anything.

log shows:
org.apache.jackrabbit.core.query.lucene.DescendantSelfAxisQuery Access denied to node id d8cbdd0f-4fe1-473f-b452-219a3eb3d867.

Where as this query works, and returns the user homes the session has read access to:
/jcr:root//element(*,rep:User)