angela created OAK-8155:
---------------------------
Summary: CompositePermissionProvider: add possibility to abort
evaluation
Key: OAK-8155
URL: https://issues.apache.org/jira/browse/OAK-8155
Project: Jackrabbit Oak
Issue Type: New Feature
Components: security, security-spi
Reporter: angela
Assignee: angela
Fix For: 1.12
when aggregating multiple authorization models we currently have the ability to
choose between CompositionType.AND and CompositionType.OR for the evaluation of
effective permissions. In other words as soon as more than 1 PermissionProvider
is present for the evaluation the results of that evaluation are either
combined in an AND or OR fashion.
however, we currently lack the ability to stop or abort the evaluation if a
given provider instance was 'sufficient' to determine if a given set of
permissions is granted or denied.
[~stillalex], let's discuss ideas and options on how we could achieve this.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
