Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-8155

CompositePermissionProvider: add possibility to abort evaluation

    XMLWordPrintableJSON

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.16.0
    • Component/s: security, security-spi
    • Labels:
      None

      Description

      when aggregating multiple authorization models we currently have the ability to choose between CompositionType.AND and CompositionType.OR for the evaluation of effective permissions. In other words as soon as more than 1 PermissionProvider is present for the evaluation the results of that evaluation are either combined in an AND or OR fashion.

      however, we currently lack the ability to stop or abort the evaluation if a given provider instance was 'sufficient' to determine if a given set of permissions is granted or denied.

      Alex Deparvu, let's discuss ideas and options on how we could achieve this.

        Attachments

        1. OAK-8155.patch
          14 kB
          Angela Schreiber
        2. OAK-8155-2.patch
          15 kB
          Angela Schreiber
        3. OAK-8155-2-test.patch
          40 kB
          Angela Schreiber
        4. OAK-8155-3.patch
          28 kB
          Angela Schreiber
        5. OAK-8155-4.patch
          18 kB
          Angela Schreiber
        6. OAK-8155-4-test.patch
          22 kB
          Angela Schreiber
        7. OAK-8155-test.patch
          23 kB
          Angela Schreiber

          Issue Links

            Activity

              People

              • Assignee:
                angela Angela Schreiber
                Reporter:
                angela Angela Schreiber
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: