[OAK-8671] respect PARAM_READ_PATHS configuration option

• Type: Improvement
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 1.20.0
• Component/s: authorization-principalbased
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 04/Oct/19 06:42
• Updated: 25/Nov/19 06:28
• Resolved: 16/Oct/19 07:01

Description

while testing migration of default permission setup to principalbased permissions i noticed that the evaluation currently doesn't respect the PermissionConstants.PARAM_READ_PATHS configuration.

while this could be worked around by explicitly granting read access, it seems more consistent to take the configuration option into account.

Issue Links

• is blocked by: OAK-8688 Move ReadPolicy from core to security-spi
• relates to: OAK-8689 AccessControlManager.getEffectivePolicies doesn't include ReadPolicy for subtrees

Sub-Tasks

• run permissionevaluation and hasgetitem benchmarks: Resolved
• update documentation: Closed