enapps-enorman opened a new pull request, #13:
URL:
https://github.com/apache/sling-org-apache-sling-jcr-jackrabbit-accessmanager/pull/13
If a parent node has one set of values for a restriction and the child node
has a different set of values for the same restriction, then the effective ACE
view of the child node should have both of those value sets merged together.
For example, consider this use case:
Post a modifyAce request with fields like this on a parent node:
```
privilege@rep:readProperties=deny
restriction@rep:readProperties@rep:itemNames@Allow=item1
```
Post a modifyAce request with fields like this on the child node:
`restriction@rep:readProperties@rep:itemNames@Allow=item2`
The expected output for the effective ace should have both values:
```
{
"principal": "testuser1",
"privileges": {
"rep:readProperties": {
"allow": {
"rep:itemNames": [
"displayName",
"recentEntryCount"
]
},
"deny": true
},
"jcr:read": {
"allow": true
}
},
"declaredAt": {
"node": [
"/content/pages",
"/content/pages/subpage1"
]
}
}
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscr...@sling.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
