[ https://issues.apache.org/jira/browse/OAK-8054?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16769471#comment-16769471 ]
angela edited comment on OAK-8054 at 2/15/19 4:17 PM: ------------------------------------------------------ [~stillalex], i created an additional test case (attached) that is just a tiny extension of the existing test, but which fills the {{rep:members}} property and forces the creation of the member-references-list subtree... and see: since the node type defining that structure has no residual properties (in contrast to the rep:Group type), the constraint violations is trigger. nice one indeed :) was (Author: anchela): [~stillalex], i created an additional test case that is just a tiny extension of the existing test, but which fills the {{rep:members}} property and forces the creation of the member-references-list subtree... and see: since the node type defining that structure has no residual properties (in contrast to the rep:Group type), the constraint violations is trigger. nice one indeed :) > RepMembersConflictHandler creates property with wrong type > ---------------------------------------------------------- > > Key: OAK-8054 > URL: https://issues.apache.org/jira/browse/OAK-8054 > Project: Jackrabbit Oak > Issue Type: Bug > Components: core, security > Reporter: Alex Deparvu > Assignee: Alex Deparvu > Priority: Critical > Attachments: OAK-8054.patch > > > The {{RepMembersConflictHandler}} handler uses type {{STRING}} instead of > {{WEAKREFERENCE}} [0] as per the property's definition, which will trigger > the type validation to fail the commit. > Running external login tests I see that the type fails as soon as the handler > comes into play: > {noformat} > WARN o.a.j.o.s.s.a.e.i.ExternalLoginModule - User synchronization failed > during commit: org.apache.jackrabbit.oak.api.CommitFailedException: > OakConstraint0004: > /rep:security/rep:authorizables/rep:groups/pathPrefix/g8/rep:membersList/9[[rep:MemberReferences]]: > No matching property definition found for rep:members = > [8e490910-17b6-30c1-8e11-6abdfa8a4ebc, 1a8e79f5-428e-39e9-88bb-2b86bd9b402e, > ... ]. (attempt 10/50) > {noformat} > This seems to be a pretty big issue, and I'm not yet sure why it wasn't > caught by the existing tests. > // fyi [~anchela] > [0] > https://github.com/apache/jackrabbit-oak/blob/trunk/oak-core/src/main/java/org/apache/jackrabbit/oak/security/user/RepMembersConflictHandler.java#L135 -- This message was sent by Atlassian JIRA (v7.6.3#76005)