Description
Open scoped locks in JCR can be quite troublesome to use in practice. Mainly because of the requirement to remember the token generated by a lock operation. This token must be added again to the session when a unlock is called. The problematic part is where to store the token und what happens when the token is lost. In practice it is usually more desireable to allow any session autenticated for a given user to unlock the nodes for which he/she is the lock owner (identified by the jcr:lockOwner property).
I suggest we make this a deployment option.