[ 
https://issues.apache.org/jira/browse/SLING-1090?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Eric Norman updated SLING-1090:
-------------------------------

    Attachment: SLING-1090_patch.txt

> PrivilegesInfo.canDelete(..) returns wrong value for children of the root node
> ------------------------------------------------------------------------------
>
>                 Key: SLING-1090
>                 URL: https://issues.apache.org/jira/browse/SLING-1090
>             Project: Sling
>          Issue Type: Bug
>          Components: JCR
>    Affects Versions: JCR Jackrabbit Access Manager 2.0.2
>            Reporter: Eric Norman
>         Attachments: SLING-1090_patch.txt
>
>
> When calling the 
> org.apache.sling.jcr.jackrabbit.accessmanager.PrivilegesInfo.canDelete(session,
>  absPath) for a path with only one segment (i.e. a child of root), the value 
> returned 
> is always false even if the current user does have permission to delete the 
> node.  It fails because the calculated parent path in this scenario resolves 
> to an empty string instead of "/".  
> The attached patch fixes this edge condition.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to