Uploaded image for project: 'Jackrabbit Content Repository'
  1. Jackrabbit Content Repository
  2. JCR-3382

ItemManager.getNode does not do a permission check when the item data is in the item manager cache

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.6
    • 2.6.1, 2.7
    • None
    • None

    Description

      Read access should be checked irrespective of whether the item data is in the cache or not. Something might have changed between first reading the node and reading the node again that impacts read access.

      We are running into the situation where node.hasNode() returns false for a node that is in the item manager cache and for which access was revoked but node.getNode() returns the node anyway. So node.hasNode is implemented in the right way, but node.getNode is not.

      Attachments

        1. JCR-3382.patch
          0.9 kB
          Frank van Lankvelt
        2. performance.patch
          5 kB
          Francesco Mari
        3. performance-more-reads.patch
          5 kB
          Francesco Mari

        Activity

          People

            unico@apache.org Unico Hommes
            unico@apache.org Unico Hommes
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: