[SLING-6191] Background servlets uses the user's session to create job node

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: Background Servlets 1.0.6
• Component/s: Extensions
• Assignee: Unassigned
• Reporter: Santiago García Pimentel
• Created: 26/Oct/16 14:37
• Updated: 31/Oct/16 13:30

Description

When you call a background servlet, it will create a node by default in /var/bg/jobs. This is done using the same session of the user that made the request.

This causes problems since it is possible that the user does not have write access to that directory. If this is the case the request will fail due to an AccessDeniedException.

Also, the node doesn't seem exist by default, so you have to manually create it to apply any permissions to it.

Instead the job node should be created with a dedicated user.

I reproduced this with org.apache.sling.bgservlets 1.0.6

Issue Links

• relates to: SLING-5261 Background servlets: use a separate session for captured output