[
https://issues.apache.org/jira/browse/SLING-897?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Eric Norman reassigned SLING-897:
---------------------------------
Assignee: Eric Norman
> Setting of a Property requires remove privilege on node
> -------------------------------------------------------
>
> Key: SLING-897
> URL: https://issues.apache.org/jira/browse/SLING-897
> Project: Sling
> Issue Type: Bug
> Components: Servlets
> Affects Versions: Servlets Post 2.0.2
> Reporter: christian
> Assignee: Eric Norman
> Priority: Minor
>
> If you set a single value Proeprty with a Post handled by the PostServlet,
> the related property is removed first and than the value is set.
> While the effect is the desired change of the Property's value, it has
> side-effects.
> Et least the connected session has to have remove-privilege to set the
> property.
> Eventing may be unexpected, and other may result.
> Example:
> String path = "/content/node1";
> String pName = "property1";
> Node node = (Node) session.getRootNode().getIem(path);
> try {
> session.checkPermission(path+"/"+pName, "set_property")
> //==allowed
> } catch (AccessControlException) {
> }
> But
> POST "/content/node1"
> property1=test
> => AccessDenied
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
