Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
Description
RepPolicyEntryHandler will read restrictions only from the rep:restrictions child node (primarytype rep:Restrictions):
according to the documentation in Jackrabbit Oak the old jackrabbit2-variant of defining restrictions is still supported from the node type definition of an access control entry:
http://jackrabbit.apache.org/oak/docs/security/authorization/restriction.html#representation
this should be reflected in the handler in order not to generate repo-init statements that unintentionally create a different access control setup and ultimately alter the effective permissions present in the given repository.