[OAK-7694] Oak.OakDefaultComponents.INSTANCE is mutable

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.8.0
• Fix Version/s: 1.10.0, 1.9.7
• Component/s: core
• Assignee: Marcel Reutegger
• Reporter: Marcel Reutegger
• Created: 08/Aug/18 15:55
• Updated: 17/Aug/18 09:03
• Resolved: 09/Aug/18 12:27

Description

The OakDefaultComponents inside the Oak builder class was introduced with OAK-6826 and provides a set of default components. Those components can be overridden by calling the various Oak.with() methods.

There is a problematic OakDefaultComponents singleton INSTANCE used by Jcr. The singleton is mutable and may leak modifications from one Jcr instantiation to another one. More specifically, the SecurityProvider has a couple of configurations that extend ConfigurationBase with multiple setters.

Issue Links

• is depended upon by: OAK-7569 Direct Binary Access