[ https://issues.apache.org/jira/browse/OAK-8155?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
angela resolved OAK-8155. ------------------------- Resolution: Fixed Fix Version/s: 1.16.0 [~stillalex], can't wait any longer. assuming no news is good news and committed revision 1860721. > CompositePermissionProvider: add possibility to abort evaluation > ---------------------------------------------------------------- > > Key: OAK-8155 > URL: https://issues.apache.org/jira/browse/OAK-8155 > Project: Jackrabbit Oak > Issue Type: New Feature > Components: security, security-spi > Reporter: angela > Assignee: angela > Priority: Major > Fix For: 1.16.0 > > Attachments: OAK-8155-2-test.patch, OAK-8155-2.patch, > OAK-8155-3.patch, OAK-8155-4-test.patch, OAK-8155-4.patch, > OAK-8155-test.patch, OAK-8155.patch > > > when aggregating multiple authorization models we currently have the ability > to choose between CompositionType.AND and CompositionType.OR for the > evaluation of effective permissions. In other words as soon as more than 1 > PermissionProvider is present for the evaluation the results of that > evaluation are either combined in an AND or OR fashion. > however, we currently lack the ability to stop or abort the evaluation if a > given provider instance was 'sufficient' to determine if a given set of > permissions is granted or denied. > [~stillalex], let's discuss ideas and options on how we could achieve this. -- This message was sent by Atlassian JIRA (v7.6.3#76005)