Description
Currently due to the check in https://github.com/apache/jackrabbit-filevault/blob/e257001ec22ea06bcc987cbf79f0cc9b15c4e186/vault-core/src/main/java/org/apache/jackrabbit/vault/packaging/impl/ZipVaultPackage.java#L184 packages containing a hook can only be installed by admins.
Although I do understand the intent of that I think this is not flexible enough as currently that only gives the rights to users "admin", "system" or members of group "administrators". Instead there should be an OSGi configuration which allows to configure to grant the right to install packages with hooks to other groups as well!
Attachments
Issue Links
- is related to
-
JCRVLT-515 AdminPermissionChecker should evaluate all principals bound to the Session
-
- Closed
-
- links to