[SLING-10281] Add "ensure principal ACL" which throws an Exception it it fails

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Repoinit JCR 1.1.34
• Fix Version/s: Repoinit Parser 1.9.0, Repoinit JCR 1.1.44
• Component/s: Repoinit
• Assignee: Konrad Windszus
• Reporter: Konrad Windszus
• Created: 08/Apr/21 11:34
• Updated: 08/Feb/23 13:30
• Resolved: 23/Jan/23 18:34

Description

As highlighted in the last comment of SLING-9449, repoinit should use exceptions when some statements cannot be applied (as that leads to an undesired repository state). In the worst case it could lead to privilege escalation

Issue Links

• causes: SLING-11769 Update to Repoinit Parser 1.9.0
• causes: SLING-11750 Support the new repoinit statements
• is caused by: SLING-9449 Repoinit AclUtil#setPrincipalAcl throws exception if no path-based entry exists for principal
• links to: GitHub PR for parser
• links to: PR #14