[
https://issues.apache.org/jira/browse/SLING-10467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Angela Schreiber updated SLING-10467:
-------------------------------------
Attachment: demo-cp-0.0.0.pom
> Converted content package referres to paths moved to repo-init
> --------------------------------------------------------------
>
> Key: SLING-10467
> URL: https://issues.apache.org/jira/browse/SLING-10467
> Project: Sling
> Issue Type: Bug
> Components: Content-Package to Feature Model Converter
> Reporter: Angela Schreiber
> Priority: Major
> Attachments: demo-cp-0.0.0-cp2fm-converted.zip, demo-cp.zip
>
>
> [~kpauls], in the light of the _enforce-principal-based-supported-path_
> configuration option i had a look at the converted content packages, which
> probably need to be used instead of the original packages if the
> modifications applied by converted are not to be reverted by later installing
> the original content package.
> i therefore created a simple test content package _demo-cp.zip_ that contains:
> - a regular user in 'demo-cp' subfolder
> - a regular group in 'demo-cp' subfolder
> - a bunch of service users both with resource-based and principal-based ac
> setup
> - content root at /demo-cp with a ac-policy (entries for user, group and
> service user)
> - a serviceusermapping configuration below /apps/demo-cp
> and had the converter generate _demo-cp-0.0.0-cp2fm-converted.zip_
> when trying to install the converted content package on a repository that
> content for service users and below /apps installed, i noticed that the
> converted package will actually remove that content.
> i suspect that this is caused by _META_INF/vault/filter.xml_ and/or
> _META-INF/vault/definition/content.xml_ still referring to those parts that
> got 'moved' to repo-init. in case of the dependency/.content.xml it states
> that the import mode is _replace_ (same as in original package).
> maybe my test package is not correct.... but I would have expected that the
> paths that have been installed by repo-init statements should no longer be
> covered by the converted package (everything below /apps and
> /home/users/system) or/and should have the import-mode changed to the
> deprecated -MERGE- or new MERGE_PROPERTIES. the latter would be needed for
> any kind of resource-based AC setup for service users at mutable content
> nodes (NOTE: doesn't apply in case ac-setup for service users is migrated to
> principal-based authorization which entirely resides below the service user
> home).
> edge case: if regular users were to be located below _/home/users/system_
> excluding that path from the package definition obviously doesn't work....
> changing import mode would be required. alternatively: spotting regular users
> below _home/users/system_ and abort converter.
> wdyt?
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
