[JCRVLT-683] Import of Authorizable node with acHandling=IGNORE should preserve existing rep:principalPolicy child node

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.6.6
• Fix Version/s: 3.7.0
• Component/s: Packaging
• Assignee: Konrad Windszus
• Reporter: Mark Adamcin
• Created: 06/Feb/23 20:07
• Updated: 02/Oct/23 16:53
• Resolved: 12/Jul/23 07:49

Description

For situations where an authorizable node may be distributed from another environment where a different rep:principalPolicy for the user is defined than exists for that user in the target environment, it is important that the existing rep:principalPolicy be preserved when acHandling is unset, acHandling=IGNORE, or acHandling=MERGE_PRESERVE.

Currently, the effective behavior of such a package install, as it appears to be implemented in DocViewImporter, results in the following:

• If the package specifies acHandling=IGNORE, the existing rep:principalPolicy is deleted without replacement, regardless of whether the package contains its own rep:principalPolicy, which is equivalent to acHandling=CLEAR
• If the package specifies acHandling=MERGE_PRESERVE or MERGE, the existing rep:principalPolicy is replaced with whatever rep:principalPolicy is contained in the package, or deletes the policy if a replacement is not present, which is equivalent to acHandling=OVERWRITE

Unexpectedly, the least destructive (and most default) acHandling mode (IGNORE) turns out to be as destructive to packaged system user permissions as choosing any other mode. 

Issue Links

• breaks: JCRVLT-721 Importing content packages with minimum permissions fails
• links to: GitHub Pull Request #272
• links to: GitHub Pull Request #297
• links to: GitHub Pull Request #306
• links to: PR with ITs