Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-7982

ACL.addEntry: check for mandatory restrictions only respects single value restrictions

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 1.12.0, 1.10.1
    • core, security
    • None

    Description

      The validation of ACL.addEntry(Principal principal, Privilege[] privileges, boolean isAllow, Map<String, Value> restrictions, Map<String, Value[]> mvRestrictions)
      includes a check that mandatory restrictions are actually present.

      However, the code performing that check only tests if the mandatory restrictions are included in the restrictions ignoring the fact that a mandatory restriction might be multi-valued and thus provided in the mvRestrictions param.

      cc: Alex Deparvu fyi.

      Attachments

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            angela Angela Schreiber
            angela Angela Schreiber
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment