[SLING-2067] AuthorizablePrivilegesInfo throws NPE when used in a script that is being rendered for the anonymous user

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: JCR Jackrabbit User Manager 2.1.0
• Fix Version/s: JCR Jackrabbit User Manager 2.2.0
• Component/s: JCR
• Assignee: Eric Norman
• Reporter: Eric Norman
• Created: 01/May/11 23:12
• Updated: 20/Sep/19 11:34
• Resolved: 01/May/11 23:13

Description

When the current user is anonymous, the userManager.getAuthorizable(jcrSession.getUserID()) call returns null.

In the AuthorizablePrivilegesInfo impl, AuthorizablePrivilegesInfo.canAddGroup(..) and AuthorizablePrivilegesInfo.canAddUser(..) need a null check for the current authorizable object before attempting to use it.