Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
JCR Jackrabbit Access Manager 2.1.0
-
None
Description
As described by Ray Davis on the jackrabbit-users mailing list (see http://www.mail-archive.com/users@jackrabbit.apache.org/msg14734.html ), the order of the ACEs in the AccessControlList is important for resolving conflicting group permissions. When resolving the permissions, if the current user is a member of multiple groups that have permissions specified, then the last group in the ACL wins if there are any conflicts.
The jackrabbit.accessmanager bundle must provide a RESTful mechanism to re-order the existing ACEs in the ACL.