bdelacretaz commented on pull request #5:
URL: 
https://github.com/apache/sling-org-apache-sling-scripting-core/pull/5#issuecomment-781987122


   I have commented at https://issues.apache.org/jira/browse/SLING-10147 to 
suggest what I think is a simpler mechanism, blocking access to the servlet in 
question unless the current user can read a specific resource. Please have a 
look before merging this PR, I think that would be a much simpler 
implementation. Sorry that this comment comes so late, I wasn't able to have a 
look earlier.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to