[ https://issues.apache.org/jira/browse/JCRVLT-472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17183822#comment-17183822 ]
Angela Schreiber edited comment on JCRVLT-472 at 8/25/20, 7:45 AM: ------------------------------------------------------------------- [~tripod], afaik {{rep:principalPolicy}} is supported by fvault.... the principal-based policy extends from rep:Policy. [~rombert], i believe you need to either import the principal first or change the repository configuration to have importbehavior=besteffort defined. alternatively, you try to define princiopal-based access control setup for a principal that is not supported (wrong principal type or unsupported path. see http://jackrabbit.apache.org/oak/docs/security/authorization/principalbased.html for details). was (Author: anchela): [~tripod], afaik {{rep:principalPolicy}} is supported by fvault.... the principal-based policy extends from rep:Policy. [~rombert], i believe you need to either import the principal first or change the repository configuration to have importbehavior=besteffort defined. > Content package with principal policy fails to install when the user is in > the same package > ------------------------------------------------------------------------------------------- > > Key: JCRVLT-472 > URL: https://issues.apache.org/jira/browse/JCRVLT-472 > Project: Jackrabbit FileVault > Issue Type: Improvement > Components: Packaging > Reporter: Robert Munteanu > Priority: Major > Attachments: sling-slingshot-apps-pkg-1.0-SNAPSHOT.zip > > > I have attached a content package that includes a system user, a principal > policy and a principal entry. The content package, when installed in the > Sling Starter 12-SNAPSHOT, fails the first time and then the second time > works. The full error is > {noformat}24.08.2020 17:24:08.669 *WARN* [pool-10-thread-1] > com.composum.sling.core.pckgmgr.util.PackageUtil Received error for mode > PATHS path /home/users/system/sling/slingshot/rep:principalPolicy > org.xml.sax.SAXException: javax.jcr.security.AccessControlException: > Unsupported principal slingshot-service > at > org.apache.jackrabbit.vault.fs.impl.io.DocViewSAXImporter.endElement(DocViewSAXImporter.java:1246) > [org.apache.jackrabbit.vault:3.4.6] > at > java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:610) > at > java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(XMLDocumentFragmentScannerImpl.java:1718) > at > java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2883) > at > java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:605) > at > java.xml/com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocumentScannerImpl.java:112) > at > java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:534) > at > java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:888) > at > java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:824) > at > java.xml/com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141) > at > java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1216) > at > java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(SAXParserImpl.java:635) > at > java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl.parse(SAXParserImpl.java:324) > at > org.apache.jackrabbit.vault.fs.impl.io.GenericArtifactHandler.accept(GenericArtifactHandler.java:100) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:896) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:799) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839) > [org.apache.jackrabbit.vault:3.4.6] > at org.apache.jackrabbit.vault.fs.io.Importer.run(Importer.java:440) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.packaging.impl.ZipVaultPackage.extract(ZipVaultPackage.java:255) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.extract(JcrPackageImpl.java:400) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.extract(JcrPackageImpl.java:359) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.install(JcrPackageImpl.java:353) > [org.apache.jackrabbit.vault:3.4.6] > at > com.composum.sling.core.pckgmgr.PackageJobExecutor$PackageManagerCallable$InstallOperation.doIt(PackageJobExecutor.java:173) > [com.composum.core.pckgmgr:1.12.0] > at > com.composum.sling.core.pckgmgr.PackageJobExecutor$PackageManagerCallable$Operation.call(PackageJobExecutor.java:276) > [com.composum.core.pckgmgr:1.12.0] > at > com.composum.sling.core.pckgmgr.PackageJobExecutor$PackageManagerCallable.call(PackageJobExecutor.java:145) > [com.composum.core.pckgmgr:1.12.0] > at > com.composum.sling.core.pckgmgr.PackageJobExecutor$PackageManagerCallable.call(PackageJobExecutor.java:125) > [com.composum.core.pckgmgr:1.12.0] > at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) > at > java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) > at > java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) > at java.base/java.lang.Thread.run(Thread.java:834) > Caused by: javax.jcr.security.AccessControlException: Unsupported principal > slingshot-service > at > org.apache.jackrabbit.oak.spi.security.authorization.principalbased.impl.PrincipalBasedAccessControlManager.canHandle(PrincipalBasedAccessControlManager.java:308) > [org.apache.jackrabbit.oak-authorization-principalbased:1.32.0] > at > org.apache.jackrabbit.oak.spi.security.authorization.principalbased.impl.PrincipalBasedAccessControlManager.getPolicies(PrincipalBasedAccessControlManager.java:132) > [org.apache.jackrabbit.oak-authorization-principalbased:1.32.0] > at > org.apache.jackrabbit.oak.security.authorization.composite.CompositeAccessControlManager.getPolicies(CompositeAccessControlManager.java:154) > [org.apache.jackrabbit.oak-core:1.32.0] > at > org.apache.jackrabbit.oak.jcr.delegate.JackrabbitAccessControlManagerDelegator$2.perform(JackrabbitAccessControlManagerDelegator.java:75) > [org.apache.jackrabbit.oak-jcr:1.32.0] > at > org.apache.jackrabbit.oak.jcr.delegate.JackrabbitAccessControlManagerDelegator$2.perform(JackrabbitAccessControlManagerDelegator.java:71) > [org.apache.jackrabbit.oak-jcr:1.32.0] > at > org.apache.jackrabbit.oak.jcr.delegate.SessionDelegate.perform(SessionDelegate.java:207) > [org.apache.jackrabbit.oak-jcr:1.32.0] > at > org.apache.jackrabbit.oak.jcr.delegate.JackrabbitAccessControlManagerDelegator.getPolicies(JackrabbitAccessControlManagerDelegator.java:71) > [org.apache.jackrabbit.oak-jcr:1.32.0] > at > org.apache.jackrabbit.vault.fs.impl.io.JackrabbitACLImporter$ImportedPolicy.getPolicy(JackrabbitACLImporter.java:192) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.fs.impl.io.JackrabbitACLImporter$ImportedPrincipalAcList.apply(JackrabbitACLImporter.java:433) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.fs.impl.io.JackrabbitACLImporter.close(JackrabbitACLImporter.java:154) > [org.apache.jackrabbit.vault:3.4.6] > at > org.apache.jackrabbit.vault.fs.impl.io.DocViewSAXImporter.endElement(DocViewSAXImporter.java:1190) > [org.apache.jackrabbit.vault:3.4.6] > ... 34 common frames omitted > {noformat} > When I retry installing the content package the operation succeeds, which may > be a hint that the freshly created user is not yet visible to the rest of the > import operation on the first try. -- This message was sent by Atlassian Jira (v8.3.4#803005)