[OAK-9424] AccessControlManagerImpl ignores importBehavior when retrieving policies by principal(s)

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.40.0
• Component/s: core, security
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 05/May/21 08:47
• Updated: 03/Jun/21 14:53
• Resolved: 07/May/21 14:27

Description

the default implementation of AccessControlManager in oak takes the configured importBehavior into account when adding new entries to access control lists obtained by path. however, when accessing policies by principal however the importBehavior is ignored.

Issue Links

• Discovered while testing: SLING-10299 Allow for removal of access control policies (not just individual entries)