PrivilegesInfo.canDelete(..) returns wrong value for children of the root node
------------------------------------------------------------------------------
Key: SLING-1090
URL: https://issues.apache.org/jira/browse/SLING-1090
Project: Sling
Issue Type: Bug
Components: JCR
Affects Versions: JCR Jackrabbit Access Manager 2.0.2
Reporter: Eric Norman
When calling the
org.apache.sling.jcr.jackrabbit.accessmanager.PrivilegesInfo.canDelete(session,
absPath) for a path with only one segment (i.e. a child of root), the value
returned
is always false even if the current user does have permission to delete the
node. It fails because the calculated parent path in this scenario resolves to
an empty string instead of "/".
The attached patch fixes this edge condition.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.