[OAK-9793] AbstractRestrictionProvider: validation to respect aggregation for unsupported paths

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.44.0
• Component/s: security-spi
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 03/Jun/22 05:06
• Updated: 15/Jul/22 14:53
• Resolved: 03/Jun/22 07:49

Description

when used in a composite setup AbstractRestrictionProvider#validateRestrictions needs to verify if a restriction defined for an unsupported path would be supported by another provider in the composite similar to https://github.com/apache/jackrabbit-oak/blob/trunk/oak-security-spi/src/main/java/org/apache/jackrabbit/oak/spi/security/authorization/restriction/AbstractRestrictionProvider.java#L180

Issue Links

• is part of: OAK-9782 CompositeRestrictionProvider must call validate on aggregated providers