[ https://issues.apache.org/jira/browse/OAK-7982?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Davide Giannella updated OAK-7982: ---------------------------------- Fix Version/s: (was: 1.11.0) > ACL.addEntry: check for mandatory restrictions only respects single value > restrictions > -------------------------------------------------------------------------------------- > > Key: OAK-7982 > URL: https://issues.apache.org/jira/browse/OAK-7982 > Project: Jackrabbit Oak > Issue Type: Bug > Components: core, security > Reporter: angela > Assignee: angela > Priority: Major > Fix For: 1.12.0, 1.10.1 > > Attachments: OAK-7982.patch > > > The validation of {{ACL.addEntry(Principal principal, Privilege[] privileges, > boolean isAllow, Map<String, Value> restrictions, Map<String, Value[]> > mvRestrictions)}} > includes a check that mandatory restrictions are actually present. > However, the code performing that check only tests if the mandatory > restrictions are included in the {{restrictions}} ignoring the fact that a > mandatory restriction might be multi-valued and thus provided in the > {{mvRestrictions}} param. > cc: [~stillalex] fyi. -- This message was sent by Atlassian JIRA (v7.6.3#76005)