[OAK-952] AccessControlValidator: fail for ACEs created for any of the admin principals

• Type: Sub-task
• Status: Resolved
• Priority: Minor
• Resolution: Won't Fix
• Component/s: core
• Assignee: Unassigned
• Reporter: Angela Schreiber
• Created: 09/Aug/13 09:10
• Updated: 01/Oct/14 14:02
• Resolved: 31/Oct/13 17:54

Description

we may consider failing any AC modification if the principal associated with
a given ACE is either the system principal, an admin principal or one of the principals listed as admin in the permission configuration.

while having ACEs for those prinicpals don't have an effect it might be confusing that they can be created in the first place and may create a wrong sense of security.

Issue Links

• is cloned by: OAK-2158 Fail for ACEs created for the admin principal