[OAK-9415] Allow access to all principals bound to the current session

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.40.0
• Component/s: jcr
• Assignee: Konrad Windszus
• Reporter: Konrad Windszus
• Created: 20/Apr/21 15:02
• Updated: 03/Jun/21 14:53
• Resolved: 29/Apr/21 11:37

Description

Currently there is no API to retrieve all principals bound to a specific session (see https://issues.apache.org/jira/browse/JCRVLT-515). Session.getUserId() may at most return the user backing the first principal and https://www.javadoc.io/doc/org.apache.jackrabbit/jackrabbit-api/latest/org/apache/jackrabbit/api/JackrabbitSession.html does not expose any other method which can be used for that.

In Oak this can be simply implemented via ContentSession.getAuthInfo().getPrincipals()

Issue Links

• is caused by: JCRVLT-515 AdminPermissionChecker should evaluate all principals bound to the Session
• is related to: OAK-9416 Add bridge method to get Oak ContentSession from JCR Session
• links to: GitHub Pull Request #288
• links to: GitHub Pull Request #291