[SLING-9690] Configure best-effort import behaviour for access control items

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Karaf Features 1.0.0, Karaf Configs 1.0.0, Starter 12
• Component/s: Karaf, Starter
• Assignee: Robert Munteanu
• Reporter: Robert Munteanu
• Created: 25/Aug/20 11:16
• Updated: 18/Mar/22 15:05
• Resolved: 25/Aug/20 11:17

Description

When importing principals and access control entries in the same package there are some scenarios that don't work out-of-the-box with FileVault content packages

• users and resource-based ACEs in the same content package; users are not guaranteed to be processed before ACEs ( see [e-mail]: Installing users and access control entries in the same package )
• users and principal-based ACEs in the same content package ( see JCRVLT-472 )

A reasonable workaround for this kind of scenarios is to configure AuthorizationConfigurationImpl to have a "besteffort" import behaviour.