[SLING-8117] Add support to read/write ACE restrictions from REST

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: JCR Jackrabbit Access Manager 3.0.2
• Fix Version/s: JCR Jackrabbit Access Manager 3.0.4
• Assignee: Eric Norman
• Reporter: Eric Norman
• Created: 16/Nov/18 22:00
• Updated: 20/Sep/19 11:34
• Resolved: 16/Dec/18 22:01

Description

Support for read/write of restrictions on the ACE has not yet been implemented in the sling jackrabbit.accessmanager REST operations. 
 
However it looks like adding support for read/write of ACE restrictions would not be too difficult and it looks like it could be useful to the community.
 
It looks like changes would be needed in a few bundles, specifically these:
 
1. org.apache.sling.jcr.base ( see SLING-8139  )
    a) Changes to the AccessControlUtil addEntry/replaceAccessControlEntry methods to support passing in and processing of restrictions
2. org.apache.sling.jcr.jackrabbit.accessmanager
    a) ModifyAce - changes to process posted "restriction" parameters to be set
    b) GetAcl/GetEffectiveAcl servlets - changes to return the declared restriction values in the returned JSON
    c) PrivilegesInfo - add methods to read the declared restrictions to be used from scripts who are interested in such things
3. Plus some automated tests and updated documentation...
 

Issue Links

• is cloned by: SLING-8139 Improve support to read/write ACE restrictions from AccessControlUtil
• is related to: SLING-8118 Add support to set ACE restrictions from contentloader
• requires: SLING-8139 Improve support to read/write ACE restrictions from AccessControlUtil
• requires: SLING-8138 Upgrade to jackrabbit 2.16.x and oak 1.8.x