[OAK-1268] Add support for composite authorization setup

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.4, 1.4.0
• Component/s: core
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 06/Dec/13 10:08
• Updated: 10/Mar/16 11:20
• Resolved: 22/Feb/16 09:52

Description

it would be desirable if was not only be able to replace the default authorization setup but instead being able to plug custom implementations such that they can be combined with existing implementation(s).

while this is more or less straight forward for the access control management part, we need some further refinement that allows to define how different permission providers will interact.

Issue Links

• is blocked by: OAK-3541 VersionableState.copy doesn't respect OPV flag in the subtree
• is blocked by: OAK-3901 SecurityProviderRegistration must respect service ranking of aggregated configurations
• is blocked by: OAK-3902 SecurityProviderRegistration doesn't fill the composite context
• is related to: SLING-3148 Implement support for Feature Flags/Toggles in Sling
• is related to: OAK-951 Consider implementing regular access control operations for ReadPolicy

Sub-Tasks

• authorization setup for closed user groups: Closed
• evaluation for special tree types in aggregation: Closed
• authorization setup for closed user groups (follow up): Closed
• Document composite authorization setup: Closed