Can anyone enlighten me on the purpose of Context.getNoOp()?
 
ReadOnlyContext.EMPTY creates one with noOp set to true, and
PolicyEnforcementPoint.enforce throws a AuthzPermittedException("noOp") if
it finds noOp set to true.
 
But I really can't work out the logic for this.
 
The REST API for instance looks for a request parameter named "noOp" and
sets the context noOp based on that (defaulting to False I think)
 
It's causing me an issue with
DatastreamManagedContent.getContentStream(null) as the ReadOnlyContext.EMPTY
used there is resulting in an authz failure.
 
Steve
------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d
_______________________________________________
Fedora-commons-developers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fedora-commons-developers

Reply via email to