[
https://issues.apache.org/jira/browse/JCR-3382?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Francesco Mari updated JCR-3382:
--------------------------------
Attachment: performance.patch
Added performance tests.
> ItemManager.getNode does not do a permission check when the item data is in
> the item manager cache
> --------------------------------------------------------------------------------------------------
>
> Key: JCR-3382
> URL: https://issues.apache.org/jira/browse/JCR-3382
> Project: Jackrabbit Content Repository
> Issue Type: Bug
> Affects Versions: 2.6
> Reporter: Unico Hommes
> Assignee: Unico Hommes
> Fix For: 2.6.1, 2.7
>
> Attachments: JCR-3382.patch, performance.patch
>
>
> Read access should be checked irrespective of whether the item data is in the
> cache or not. Something might have changed between first reading the node and
> reading the node again that impacts read access.
> We are running into the situation where node.hasNode() returns false for a
> node that is in the item manager cache and for which access was revoked but
> node.getNode() returns the node anyway. So node.hasNode is implemented in the
> right way, but node.getNode is not.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
