[JCRVLT-427] Allow installation of packages with hook for users without admin privileges

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.4.6
• Component/s: vlt
• Assignee: Konrad Windszus
• Reporter: Konrad Windszus
• Created: 31/Mar/20 11:01
• Updated: 06/Apr/21 12:30
• Resolved: 05/Jun/20 15:32

Description

Currently due to the check in https://github.com/apache/jackrabbit-filevault/blob/e257001ec22ea06bcc987cbf79f0cc9b15c4e186/vault-core/src/main/java/org/apache/jackrabbit/vault/packaging/impl/ZipVaultPackage.java#L184 packages containing a hook can only be installed by admins.
Although I do understand the intent of that I think this is not flexible enough as currently that only gives the rights to users "admin", "system" or members of group "administrators". Instead there should be an OSGi configuration which allows to configure to grant the right to install packages with hooks to other groups as well!

Issue Links

• is related to: JCRVLT-515 AdminPermissionChecker should evaluate all principals bound to the Session
• links to: GitHub Pull Request #80