Ronald Wildenberg wrote:
>    I recently posted a bug in the bugtracker stating that NodeManager.getList
>    is broken when you implement a custom authorization implementation
>    that does not override Authorization.check(UserContext, Query, Operation).
>    I cannot seem to reach www.mmbase.org at the moment, so I can not provide
>    the bug number, but it was posted the day before yesterday.

It's #6612.

>     
>    I wondered if anyone could provide me with a temporary solution for this
>    problem. I'll repeat the problem here.

The temporary solution would perhaps be to implement this check function in your 
security
implementation. It would be better anyway. If you never disallow reading, you simply 
return
COMPLETE_CHECK.


>    So the question is whether it is possible to check inside
>    BasicCloud.checkNodes whether the nodes contained in the list are
>    primitive nodes or cluster nodes. The retrieval of the number fields could
>    then be either by the 'number' field or by the <builderName>.number field.

Possibly it is enough to check the type of the Query object. I will look into this.

Michiel



-- 
Michiel Meeuwissen                  mihxil'
Mediacentrum 140 H'sum                [] ()
+31 (0)35 6772979         nl_NL eo_XX en_US




Reply via email to