[OAK-9494] Check if a privilege name is included in a set/array of Privileges obtained from AccessControlManager.getPrivileges

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.42.0
• Component/s: jackrabbit-api, security
• Assignee: Angela Schreiber
• Reporter: Joerg Hoh
• Created: 15/Jul/21 11:27
• Updated: 11/May/22 15:02
• Resolved: 21/Jul/21 09:40

Description

I have a case where I need to check for a session if individual privileges are available for a specific node. For performance reasons I want to avoid to execute multiple calls to accessControlManager.hasPrivilege(...), but get all Privileges of that node once and the set various flags based on the presene of certain privileges or not.

I want to use something like this:

Set<String> applicablePrivilegeNames = ...(accessControlManager.getPrivileges(path))...

boolean canAddChildNodes = applicablePrivilegeNames.contains(Privilege.JCR_ADD_CHILD_NODES);
boolean canWrite = applicablePrivilegeNames.contains(Privilege.WRITE);

It should work with aggregates as well.

Right now it's a bit problematic because privilege.getName() resolves to something like jcr:read, while the value of Privilege.JCR_READ is {http://www.jcp.org/jcr/1.0}read

Issue Links

• causes: OAK-9555 javadoc error due to bracket mismatch