[
https://issues.apache.org/jira/browse/JCRVLT-472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17183908#comment-17183908
]
Robert Munteanu commented on JCRVLT-472:
----------------------------------------
Thank you for your comments. For extended context, the principal is part of the
content package and included in the operation, judging by the log
{noformat}Creating snapshot for package
org.apache.sling:sling-slingshot-apps-pkg:1.0-SNAPSHOT
A META-INF
A META-INF/MANIFEST.MF
A META-INF/vault
A META-INF/vault/config.xml
A META-INF/vault/filter.xml
A META-INF/vault/nodetypes.cnd
A META-INF/vault/properties.xml
A /.content.xml
A /home
A /home/.content.xml
A /home/users
A /home/users/.content.xml
A /home/users/system
A /home/users/system/.content.xml
- Aggregation status: 3 of 1 prepared, 2 collected
A META-INF/vault/definition/.content.xml
Collecting import information...
Installing node types...
Installing privileges...
Importing content...
- /
- /home
- /home/users
- /home/users/system
A /home/users/system/sling
A /home/users/system/sling/slingshot
E /home/users/system/sling/slingshot/rep:principalPolicy
! org.xml.sax.SAXException: javax.jcr.security.AccessControlException:
Unsupported principal slingshot-service
javax.jcr.security.AccessControlException: Unsupported principal
slingshot-service
saving approx 4 nodes...
Package imported (with errors, check logs!)
{noformat}
When reinstalling the package, this works as expected
{noformat}Collecting import information...
Installing node types...
Installing privileges...
Importing content...
- /
- /home
- /home/users
- /home/users/system
- /home/users/system/sling
A /home/users/system/sling/slingshot
saving approx 2 nodes...
Package imported.
{noformat}
So IMHO the principal is there, but not noticed when importing for some reason.
I will try the {{besteffort}} workaround, for the sake of completeness.
> Content package with principal policy fails to install when the user is in
> the same package
> -------------------------------------------------------------------------------------------
>
> Key: JCRVLT-472
> URL: https://issues.apache.org/jira/browse/JCRVLT-472
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Components: Packaging
> Reporter: Robert Munteanu
> Priority: Major
> Attachments: sling-slingshot-apps-pkg-1.0-SNAPSHOT.zip
>
>
> I have attached a content package that includes a system user, a principal
> policy and a principal entry. The content package, when installed in the
> Sling Starter 12-SNAPSHOT, fails the first time and then the second time
> works. The full error is
> {noformat}24.08.2020 17:24:08.669 *WARN* [pool-10-thread-1]
> com.composum.sling.core.pckgmgr.util.PackageUtil Received error for mode
> PATHS path /home/users/system/sling/slingshot/rep:principalPolicy
> org.xml.sax.SAXException: javax.jcr.security.AccessControlException:
> Unsupported principal slingshot-service
> at
> org.apache.jackrabbit.vault.fs.impl.io.DocViewSAXImporter.endElement(DocViewSAXImporter.java:1246)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:610)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(XMLDocumentFragmentScannerImpl.java:1718)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2883)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:605)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocumentScannerImpl.java:112)
> at
> java.xml/com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:534)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:888)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:824)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141)
> at
> java.xml/com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1216)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(SAXParserImpl.java:635)
> at
> java.xml/com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl.parse(SAXParserImpl.java:324)
> at
> org.apache.jackrabbit.vault.fs.impl.io.GenericArtifactHandler.accept(GenericArtifactHandler.java:100)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:896)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:799)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.io.Importer.commit(Importer.java:839)
> [org.apache.jackrabbit.vault:3.4.6]
> at org.apache.jackrabbit.vault.fs.io.Importer.run(Importer.java:440)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.ZipVaultPackage.extract(ZipVaultPackage.java:255)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.extract(JcrPackageImpl.java:400)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.extract(JcrPackageImpl.java:359)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.packaging.impl.JcrPackageImpl.install(JcrPackageImpl.java:353)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> com.composum.sling.core.pckgmgr.PackageJobExecutor$PackageManagerCallable$InstallOperation.doIt(PackageJobExecutor.java:173)
> [com.composum.core.pckgmgr:1.12.0]
> at
> com.composum.sling.core.pckgmgr.PackageJobExecutor$PackageManagerCallable$Operation.call(PackageJobExecutor.java:276)
> [com.composum.core.pckgmgr:1.12.0]
> at
> com.composum.sling.core.pckgmgr.PackageJobExecutor$PackageManagerCallable.call(PackageJobExecutor.java:145)
> [com.composum.core.pckgmgr:1.12.0]
> at
> com.composum.sling.core.pckgmgr.PackageJobExecutor$PackageManagerCallable.call(PackageJobExecutor.java:125)
> [com.composum.core.pckgmgr:1.12.0]
> at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
> at
> java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
> at
> java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
> at java.base/java.lang.Thread.run(Thread.java:834)
> Caused by: javax.jcr.security.AccessControlException: Unsupported principal
> slingshot-service
> at
> org.apache.jackrabbit.oak.spi.security.authorization.principalbased.impl.PrincipalBasedAccessControlManager.canHandle(PrincipalBasedAccessControlManager.java:308)
> [org.apache.jackrabbit.oak-authorization-principalbased:1.32.0]
> at
> org.apache.jackrabbit.oak.spi.security.authorization.principalbased.impl.PrincipalBasedAccessControlManager.getPolicies(PrincipalBasedAccessControlManager.java:132)
> [org.apache.jackrabbit.oak-authorization-principalbased:1.32.0]
> at
> org.apache.jackrabbit.oak.security.authorization.composite.CompositeAccessControlManager.getPolicies(CompositeAccessControlManager.java:154)
> [org.apache.jackrabbit.oak-core:1.32.0]
> at
> org.apache.jackrabbit.oak.jcr.delegate.JackrabbitAccessControlManagerDelegator$2.perform(JackrabbitAccessControlManagerDelegator.java:75)
> [org.apache.jackrabbit.oak-jcr:1.32.0]
> at
> org.apache.jackrabbit.oak.jcr.delegate.JackrabbitAccessControlManagerDelegator$2.perform(JackrabbitAccessControlManagerDelegator.java:71)
> [org.apache.jackrabbit.oak-jcr:1.32.0]
> at
> org.apache.jackrabbit.oak.jcr.delegate.SessionDelegate.perform(SessionDelegate.java:207)
> [org.apache.jackrabbit.oak-jcr:1.32.0]
> at
> org.apache.jackrabbit.oak.jcr.delegate.JackrabbitAccessControlManagerDelegator.getPolicies(JackrabbitAccessControlManagerDelegator.java:71)
> [org.apache.jackrabbit.oak-jcr:1.32.0]
> at
> org.apache.jackrabbit.vault.fs.impl.io.JackrabbitACLImporter$ImportedPolicy.getPolicy(JackrabbitACLImporter.java:192)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.impl.io.JackrabbitACLImporter$ImportedPrincipalAcList.apply(JackrabbitACLImporter.java:433)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.impl.io.JackrabbitACLImporter.close(JackrabbitACLImporter.java:154)
> [org.apache.jackrabbit.vault:3.4.6]
> at
> org.apache.jackrabbit.vault.fs.impl.io.DocViewSAXImporter.endElement(DocViewSAXImporter.java:1190)
> [org.apache.jackrabbit.vault:3.4.6]
> ... 34 common frames omitted
> {noformat}
> When I retry installing the content package the operation succeeds, which may
> be a hint that the freshly created user is not yet visible to the rest of the
> import operation on the first try.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
