DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=22001>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=22001 Permissions inverted during Copy/Move Summary: Permissions inverted during Copy/Move Product: Slide Version: Nightly Platform: All OS/Version: All Status: NEW Severity: Normal Priority: Other Component: Core AssignedTo: [EMAIL PROTECTED] ReportedBy: [EMAIL PROTECTED] The copyObject method in org.apache.slide.macro.MacroImpl does not check to see whether the "negative" flag is set on a permission entry. The result is that any copy/move of a resource with negative permissions (that deny access to a given principal) are inverted and allow access to the copy. The fix appears to be to add the line below to call a different NodePermission constructor: NodePermission newPermission = new NodePermission(destinationUri, permission.getSubjectUri(), permission.getActionUri(), permission.isInheritable() /*added line*/ permission.isNegative() ); I've been working with Slide 1.x, but verified that the code is still the same in the 1.29 version of MacroImpl.java on the HEAD branch. Thanks to [EMAIL PROTECTED] who discovered the problem. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
