[JCR-4429] Add extension of JackrabbitAccessControlList bound to a principal

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.20, 2.19.3, 2.18.2
• Component/s: jackrabbit-api
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 26/Apr/19 16:45
• Updated: 21/May/19 13:45
• Resolved: 03/May/19 09:02

Description

while JackrabbitAccessControlManager supports editing policies by principals since quite some time, available set of access control policies didn't provide a variant that was naturally bound to a given principal. the attached patch would introduce an extension of AccessControlList that was actually bound to a principal.

stillalex, i would appreciate if you had time to take a look at the proposed extension. anything missing in terms of contract? does it make sense?

Issue Links

• is related to: OAK-8190 Dedicated authorization for system users
• is related to: OAK-8295 Update version of jackrabbit dependency