[OAK-9782] CompositeRestrictionProvider must call validate on aggregated providers

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.44.0
• Component/s: security-spi
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 24/May/22 06:53
• Updated: 15/Jul/22 14:53
• Resolved: 30/May/22 06:34

Description

while testing OAK-9775 i noticed that CompositeRestrictionProvider.validateRestrictions does not call the validation on the individual aggregated providers. IMHO this will cause OAK-1612 to resurface when the default restriction provider is combined with a additional one.

the fix would be to delegate the validation to the aggregated providers instead.

Issue Links

• Discovered while testing: OAK-9775 ACEs with unsupported restrictions must be cleared upon editing
• incorporates: OAK-9793 AbstractRestrictionProvider: validation to respect aggregation for unsupported paths
• incorporates: OAK-9786 Document changes for OAK-9782
• is required by: OAK-9775 ACEs with unsupported restrictions must be cleared upon editing