[OAK-6540] Session.hasAccess(...) should reflect read-only status of mounts

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Invalid
• Fix Version/s: 1.7.6, 1.8.0
• Component/s: composite, security
• Assignee: Unassigned
• Reporter: Robert Munteanu
• Created: 09/Aug/17 15:21
• Updated: 12/Jan/18 12:00
• Resolved: 09/Aug/17 15:37

Description

When a mount is set in read-only mode callers that check Session.hasPermission("set_property", ...) or Session.hasPermission("add_node", ...) for mounted paths will believe that they are able to write under those paths. For a composite setup with a read-only mount this should (IMO) reflect that callers are not able to write, taking into account the mount information on top of the ACEs.

anchela, stillalex - WDYT?

Issue Links

• is cloned by: OAK-6563 Session.hasCapability(...) should reflect read-only status of mounts