[SLING-5848] Define service user and ACLs for Scripting

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Done
• Component/s: Karaf, Launchpad, Scripting
• Assignee: Oliver Lietz
• Reporter: Oliver Lietz
• Created: 15/Jul/16 09:19
• Updated: 23/Jan/17 14:08
• Resolved: 23/Jan/17 14:08

Description

Scripting implementations require a (service) ResourceResolver with very limited read rights to read scripts.

Reading can be limited to these paths:

• /apps
• /libs
• /etc

Name for service user: scripting or sling-scripting or sling.scripting

repoinit:

create path /apps
create path /libs

create service user sling-scripting

set ACL for sling-scripting
  allow jcr:read on /apps
  allow jcr:read on /libs
end

Issue Links

• blocks: SLING-5252 Remove getAdministrativeResourceResolver() from Scripting Core
• blocks: SLING-5236 Remove getAdministrativeResourceResolver() usage from scripting bundles
• blocks: SLING-5928 Use Service ResourceResolver in SlingResourceTemplateResolver
• blocks: SLING-5927 Add service user and ACLs for Scripting