On 1 Jul 2010, at 14:19, Vidar Ramdal wrote:
> On Thu, Jul 1, 2010 at 1:52 PM, Ian Boston <[email protected]> wrote:
>> Hi,
>> I want to be able to stop the listing of all child nodes at specific urls,
>> but still allow direct access to items in a subtree.
>> Any ideas how this is best done in Sling? (and webdav)
>>
>> I have lots, but dont know which is going to be best.
>> eg
>> Use a ServletFilter to filter all access to /_user
>> Patch/Configure webdav to only PROPFIND etc /_user/ieb if ieb is the logged
>> in user.
>> [...]
>
> This would be fairly easy to implement using a custom AccessManager.
> But maybe that is not an option.
That is a good point,
however doing it at that level will prevent getting child nodes of a node....
which is needed to get the burried public resource
/_user/ieb/public/xyz.pdf
to get that the jcr resolver is going to need to effectively do
session.getNode("/_user").childNodes()
and the AccessManager wont be able to tell if thats for getting xyz.pdf or to
get the child nodes.
ie, at JCR level all the elements of the path have to be resolvable for the
target resource to be readable.
Ian
>
> --
> Vidar S. Ramdal <[email protected]> - http://www.idium.no
> Sommerrogata 13-15, N-0255 Oslo, Norway
> + 47 22 00 84 00 / +47 22 00 84 76
> Quando omni flunkus moritatus!
