Uploaded image for project: 'Sling'
  1. Sling
  2. SLING-2762

AbstractSlingRepository#login violates JCR spec

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: JCR
    • Labels:
      None

      Description

      AbstractSlingRepository#login seems to violate the javax.jcr.Repository spec.

      The API [0] says

      " If credentials is null, it is assumed that authentication is handled by a mechanism external to the repository itself (for example, through the JAAS framework) and that the repository implementation exists within a context (for example, an application server) that allows it to handle authorization of the request for access to the specified workspace."

      while the implementation looks like

      ...
      if (credentials == null) {
          credentials = getAnonCredentials(this.anonUser);
      }
      ...
      
      

      [0] http://www.day.com/maven/jsr170/javadocs/jcr-2.0/javax/jcr/Repository.html#login%28javax.jcr.Credentials,%20java.lang.String%29

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                asanso Antonio Sanso
                Reporter:
                asanso Antonio Sanso
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated: