[OAK-1175] Security Concerns wrt Index Definitions

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 0.17
• Component/s: core
• Labels: security
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 13/Nov/13 10:34
• Updated: 27/Feb/14 09:28
• Resolved: 18/Feb/14 16:22

Description

see http://markmail.org/message/5ivmvhi7jbuo3jp6 for the initial request for discussion.

biggest pain points from a security perspective:

• missing protection or concept for protection in a default setup
• location of the index definitions
• node types of the nodes associated with index definitions and index content

Sub-Tasks

• Review node type definition for oak:queryIndexDefinition: Closed