[ 
https://issues.apache.org/jira/browse/SLING-5848?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Oliver Lietz updated SLING-5848:
--------------------------------
    Description: 
Scripting implementations require a (service) ResourceResolver with very 
limited read rights to read scripts.

Reading can be limited to these paths:
* {{/apps}}
* {{/libs}}
* {{/etc}} (?)

Name for service user: {{scripting}} or {{sling-scripting}} or 
{{sling.scripting}} (?)

*repoinit:*
{noformat}
create path /apps
create path /libs

create service user sling-scripting

set ACL for sling-scripting
  allow jcr:read on /apps
  allow jcr:read on /libs
end
{noformat}

  was:
Scripting implementations require a (service) ResourceResolver with very 
limited read rights to read scripts.

Reading can be limited to these paths:
* {{/apps}}
* {{/libs}}
* {{/etc}} (?)

Name for service user: {{scripting}} or {{sling-scripting}} or 
{{sling.scripting}} (?)



> Define service user and ACLs for Scripting
> ------------------------------------------
>
>                 Key: SLING-5848
>                 URL: https://issues.apache.org/jira/browse/SLING-5848
>             Project: Sling
>          Issue Type: Task
>          Components: Scripting
>            Reporter: Oliver Lietz
>
> Scripting implementations require a (service) ResourceResolver with very 
> limited read rights to read scripts.
> Reading can be limited to these paths:
> * {{/apps}}
> * {{/libs}}
> * {{/etc}} (?)
> Name for service user: {{scripting}} or {{sling-scripting}} or 
> {{sling.scripting}} (?)
> *repoinit:*
> {noformat}
> create path /apps
> create path /libs
> create service user sling-scripting
> set ACL for sling-scripting
>   allow jcr:read on /apps
>   allow jcr:read on /libs
> end
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to