[OAK-6563] Session.hasCapability(...) should reflect read-only status of mounts

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.7.7, 1.8.0
• Component/s: composite, security
• Assignee: Robert Munteanu
• Reporter: Robert Munteanu
• Created: 18/Aug/17 12:05
• Updated: 14/Sep/17 13:01
• Resolved: 29/Aug/17 14:49

Description

When a mount is set in read-only mode callers that check Session.hasCapability("addNode", ...) or Session.hasPermission("setProperty", ...) for mounted paths will believe that they are able to write under those paths. For a composite setup with a read-only mount this should (IMO) reflect that callers are not able to write, taking into account the mount information on top of the ACEs.

Issue Links

• is a clone of: OAK-6540 Session.hasAccess(...) should reflect read-only status of mounts