[ https://issues.apache.org/jira/browse/OAK-842?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Michael Marth updated OAK-842: ------------------------------ Fix Version/s: 0.15 > Incorrect interaction of orderable child nodes with access control > ------------------------------------------------------------------- > > Key: OAK-842 > URL: https://issues.apache.org/jira/browse/OAK-842 > Project: Jackrabbit Oak > Issue Type: Bug > Components: core, security > Reporter: Michael Dürig > Fix For: 0.15 > > > Working on OAK-813 revealed problems with the interaction of the current > implementation of orderable nodes and access control: > * {{TreeImpl#getOrderedChildNames}} returns all child names regardless > whether they are accessible in the current session or not. This might cause > errors further down the line like exposure of the existence of child nodes. > * {{TreeImpl.remove}} doesn't (can't) update the child order property if the > parent is not accessible. -- This message was sent by Atlassian JIRA (v6.1#6144)