Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
Description
the code at
hardcodes the names of the supported restrictions. while those listed are the restrictions currently supported by oak out of the box, oak allows for customization (see jackrabbit.apache.org/oak/docs/security/authorization/restriction.html) and the set of supported restrictions may also evolve in oak.
therefore the list should not be hardcoded. if obtaining the list of supported restrictions from oak is not an option, it might be better to assume that all child-properties of the protected rep:restrictions (primary type rep:Restrictions) node below a given access control entry are actually restrictions and treat them accordingly.
Attachments
Issue Links
- links to