[ https://issues.apache.org/jira/browse/JCR-1729?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12628628#action_12628628 ]
Micah Whitacre commented on JCR-1729: ------------------------------------- what version of jackrabbit-core are you working with? > Node#addNode failes with AccessDeniedException if session lacks > read-permission to an acestor > --------------------------------------------------------------------------------------------- > > Key: JCR-1729 > URL: https://issues.apache.org/jira/browse/JCR-1729 > Project: Jackrabbit > Issue Type: Bug > Components: jackrabbit-core > Reporter: christian > Priority: Minor > > Consider a Session that has following permissions: > /home -> no permission > /home/myself -> read|remove|set_property|add_node > if this session tries to add a Node to /home/myself. > An AccessDeniedException is thrown indicateing that it can not read /home. > The Exception is caused by the Node's check, if it is checked-out. > This check asumes that the session has read-access to all its ancestors. > Which breaks in this case: > see NodeImpl internalIsCheckedOut() (ln 3875) -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.