Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-5354

Security: the order of child should be correct if the child nodes are readable.

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 1.5.17, 1.6.0
    • None
    • None

    Description

      If access rights are set such that a session can read child nodes of a node, then that session should also be able to read the child nodes in the right order (for orderable nodes). Even if the session does not have permission to read the properties of a node.

      The order of child nodes is stored in a hidden property. Access rights for this hidden property are currently checked in the same way as access rights for regular properties.

      Attachments

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            thomasm Thomas Mueller
            thomasm Thomas Mueller
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment