Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-8155

CompositePermissionProvider: add possibility to abort evaluation

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 1.16.0
    • security, security-spi
    • None

    Description

      when aggregating multiple authorization models we currently have the ability to choose between CompositionType.AND and CompositionType.OR for the evaluation of effective permissions. In other words as soon as more than 1 PermissionProvider is present for the evaluation the results of that evaluation are either combined in an AND or OR fashion.

      however, we currently lack the ability to stop or abort the evaluation if a given provider instance was 'sufficient' to determine if a given set of permissions is granted or denied.

      stillalex, let's discuss ideas and options on how we could achieve this.

      Attachments

        1. OAK-8155-4.patch
          18 kB
          Angela Schreiber
        2. OAK-8155-4-test.patch
          22 kB
          Angela Schreiber
        3. OAK-8155-3.patch
          28 kB
          Angela Schreiber
        4. OAK-8155-2-test.patch
          40 kB
          Angela Schreiber
        5. OAK-8155-2.patch
          15 kB
          Angela Schreiber
        6. OAK-8155.patch
          14 kB
          Angela Schreiber
        7. OAK-8155-test.patch
          23 kB
          Angela Schreiber

        Issue Links

          blocks

          New Feature - A new feature of the product, which has yet to be developed. OAK-8190 Dedicated authorization for system users

          • Major - Major loss of function.
          • Closed
          is blocked by

          Improvement - An improvement or enhancement to an existing feature or task. OAK-8269 Improve readability of CompositePermissionProvider and CompositeTreePermission

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            People

              angela Angela Schreiber
              angela Angela Schreiber
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: