Description
Working on OAK-813 revealed problems with the interaction of the current implementation of orderable nodes and access control:
- TreeImpl#getOrderedChildNames returns all child names regardless whether they are accessible in the current session or not. This might cause errors further down the line like exposure of the existence of child nodes.
- TreeImpl.remove doesn't (can't) update the child order property if the parent is not accessible.
Attachments
Issue Links
- blocks
-
OAK-527 Implement Permission evaluation
-
- Closed
-