### Eclipse Workspace Patch 1.0 #P oak-jcr Index: src/test/java/org/apache/jackrabbit/oak/jcr/security/authorization/ReadTest.java =================================================================== --- src/test/java/org/apache/jackrabbit/oak/jcr/security/authorization/ReadTest.java (revision 1506151) +++ src/test/java/org/apache/jackrabbit/oak/jcr/security/authorization/ReadTest.java (working copy) @@ -138,6 +138,29 @@ assertFalse(testSession.nodeExists(path)); } + @Test + public void testDenyRoot() { + try { + deny("/", readPrivileges); + testSession.getRootNode(); + fail("root should not be accessible"); + } catch (Exception e) { + // expected exception + } + } + + @Test + public void testDenyPath() { + try { + deny(path, readPrivileges); + testSession.getNode(path); + fail("nodet should not be accessible"); + } catch (Exception e) { + // expected exception + } + } + + @Test public void testReadDenied() throws Exception { /* deny READ privilege for testUser at 'path' */