Uploaded image for project: 'Jackrabbit FileVault'
  1. Jackrabbit FileVault
  2. JCRVLT-100

FileVault requires access to root node

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 3.1.26
    • Misc, Packaging
    • None

    Description

      Based on the JCRLT-99 i searched the code base for additional places where access to the root node is required.

      tripod, in the attached filevault_root_access.txt you can find the complete result for searching the jcrvlt code base for getRootNode. some seemed to be valid shortcuts (marked with (excluded)) but i suspect that others might require some attention.

      if using the functionality provided with a non-admin session, access to the root node is likely to not be granted thus rendering the filevault unusable (or risking privilege escalations by being forced to grant a non-privileged session full access up to the root node).

      i will create individual subtasks for the various parts that IMHO need to be fixed.

      Attachments

        1. JCRVLT-99_DefaultWorkspaceFilter.patch
          1 kB
          Angela Schreiber
        2. JCRVLT-99_DocViewSAXImporter_JcrSysViewTransformer.patch
          11 kB
          Angela Schreiber
        3. JCRVLT-99_Importer.patch
          2 kB
          Angela Schreiber
        4. JCRVLT-99_JcrPackageDefinitionImpl.patch
          1 kB
          Angela Schreiber
        5. JCRVLT-99_JcrPackageManagerImpl.patch
          9 kB
          Angela Schreiber
        6. filevault_root_access.txt
          7 kB
          Angela Schreiber

        Issue Links

          Activity

            People

              Unassigned Unassigned
              angela Angela Schreiber
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: