[SLING-3144] UserAdmin and GroupAdmin groups are missing on our Oak setup

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Won't Fix
• Assignee: Unassigned
• Reporter: Bertrand Delacretaz
• Created: 03/Oct/13 13:38
• Updated: 04/May/23 09:22
• Resolved: 04/May/23 09:22

Description

Some of my SLING-2788 integration tests (for example PrivilegesInfoTest) fail as the UserAdmin and GroupAdmin don't initially exist.

In Jackrabbit those groups are apparently created by UserAccessControlProvider [1] - I'll ask the Oak team how to have the equivalent in Oak.

As a workaround, creating those groups as follows allows a few more tests to pass - but for the final setup the groups need to be created with specific security-related parameters.

curl -u admin:admin -F:name=GroupAdmin http://localhost:8080/system/userManager/group.create.html
curl -u admin:admin -F:name=UserAdmin http://localhost:8080/system/userManager/group.create.html

[1] http://jackrabbit.apache.org/api/2.2/org/apache/jackrabbit/core/security/user/UserAccessControlProvider.html

Issue Links

• blocks: SLING-3143 CreateUserTest fails on Oak: CreateUserServlet.createUser doesn't work for UserAdmin group members
• blocks: SLING-3229 UserPrivilegesInfoTest integration tests fails on Oak (missing UserAdmin/GroupAdmin groups)
• blocks: SLING-3230 UpdateUserTest integration test fails with Oak
• relates to: SLING-5093 Remove UserAdmin and GroupAdmin settings from AuthorizablePrivilegesInfo
• links to: oak-dev: UserAdmin and GroupAdmin groups in Oak