[SLING-897] Updating a property fires the wrong JCR events

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: Servlets Post 2.0.2
• Fix Version/s: Servlets Post 2.1.0
• Component/s: Servlets
• Assignee: Eric Norman
• Reporter: christian
• Created: 24/Mar/09 14:41
• Updated: 20/Sep/19 11:34
• Resolved: 22/Aug/10 23:17

Description

If you set a single value Proeprty with a Post handled by the PostServlet,
the related property is removed first and than the value is set.
While the effect is the desired change of the Property's value, it has side-effects.

Et least the connected session has to have remove-privilege to set the property.
Eventing may be unexpected, and other may result.

Example:

String path = "/content/node1";
String pName = "property1";
Node node = (Node) session.getRootNode().getIem(path);
try {
session.checkPermission(path+"/"+pName, "set_property")
//==allowed
} catch (AccessControlException) {
}

But
POST "/content/node1"
property1=test

=> AccessDenied