[SLING-3462] Make ResourceAccessSecurity provider context and application context behave the same way

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Component/s: Resource Access Security
• Assignee: Mike Müller
• Reporter: Mike Müller
• Created: 18/Mar/14 19:31
• Updated: 19/Mar/14 12:41
• Resolved: 19/Mar/14 12:41

Description

The problem was described and discussed in [1].

GateResult.DONTCARE should be renamed to GateResult.CANTDECIDE to better reflect the intention of the returned value.

Application context should behave like provider context and do not grant access if registered ResourceAccessGates only return GateResult.CANTDECIDE.

This behavour should also be covered by some more integration tests.

[1] http://markmail.org/message/dhvi5qa6573xhff6