[
https://issues.apache.org/jira/browse/OAK-9047?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17098927#comment-17098927
]
Angela Schreiber commented on OAK-9047:
---------------------------------------
[~rombert], the {{SecurityProviderRegistration}} has a configurable list of
mandatory services that need to present before it's going to register the
{{SecurityProvider}}. The proposed change would IMHO be breaking backwards
compatibility.... also I am not totally sure if it's really going to help given
the design of the provider that will unregister the security provider whenever
a required service is missing.... but I might be mistaken.
> Make the DefaultAuthorizableActionProvider require a configuration
> ------------------------------------------------------------------
>
> Key: OAK-9047
> URL: https://issues.apache.org/jira/browse/OAK-9047
> Project: Jackrabbit Oak
> Issue Type: Improvement
> Components: security-spi
> Reporter: Konrad Windszus
> Priority: Major
>
> Currently configuring the {{DefaultAuthorizableActionProvider}} leads to
> restart of the Oak repository in the context of
> https://issues.apache.org/jira/browse/SLING-7811?focusedCommentId=16573171&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-16573171.
>
> It would make sense to only start the service
> https://github.com/apache/jackrabbit-oak/blob/1f90e8c632868e658cc60b95bc5ec49182c4e173/oak-security-spi/src/main/java/org/apache/jackrabbit/oak/spi/security/user/action/DefaultAuthorizableActionProvider.java#L45
> once a mandatory configuration is in place.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
