Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-8190

Dedicated authorization for system users

    XMLWordPrintableJSON

Details

    Description

      in a oak setup with immutable mounts we would like to be able to cover system users and their permissions with a separate mount. while setting up a mount for system users is feasible out of the box, this doesn't apply for the default access control content created for the associated system user principals, which due to the nature of the default authorization implementation will be distributed across the repository. in addition any entries created for any system user principal may be collocated in a mutable policy with entries for regular principals and where the order is crucial for the resulting effective permissions.Therefore it would be desirable if in a mount-based setup system users and their permission setup were to be collocated in the same mount.

      stillalex, fyi

      Attachments

        Issue Links

          is blocked by

          Bug - A problem which impairs or prevents the functions of the product. OAK-8212 ImporterImpl.importProperties prone to NPE

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. OAK-8155 CompositePermissionProvider: add possibility to abort evaluation

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. OAK-8295 Update version of jackrabbit dependency

          • Major - Major loss of function.
          • Closed
          is broken by

          Bug - A problem which impairs or prevents the functions of the product. OAK-8490 FilterProviderImpl.getFilter may fail if principal cache enabled

          • Major - Major loss of function.
          • Closed
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. OAK-8242 JavaDoc error in oak-authorization-principalbased

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved
          is related to

          New Feature - A new feature of the product, which has yet to be developed. JCRVLT-340 Adjust JackrabbitACLImporter to handle extensions provided by OAK-8190

          • Major - Major loss of function.
          • Closed
          relates to

          New Feature - A new feature of the product, which has yet to be developed. JCR-4429 Add extension of JackrabbitAccessControlList bound to a principal

          • Major - Major loss of function.
          • Closed

          Activity

            People

              angela Angela Schreiber
              angela Angela Schreiber
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: