[OAK-9701] Additional restrictions to simplify permission setup

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.44.0
• Component/s: core, docs, security, security-spi
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 22/Feb/22 14:52
• Updated: 15/Jul/22 14:53
• Resolved: 22/Feb/22 20:10

Description

the following additional restrictions should be added to simplify re-occurring permission setup patterns and avoid common mistakes/errors with wildcard glob restriction:

• a multi-value variant for rep:glob
• a multi-value simplification of rep:glob that allows to limit effect to one or multiple subtrees.

Sub-Tasks

• benchmarks comparing new restrictions to rep:glob: Closed