David,
On 2 Jun 2009, at 13:06, David Nuescheler wrote:
hi ian,
sorry for the confusion. there are is no privilege to "execute"
something in
jcr. i am not even sure that they should be part of the repository
since the
repository is not going to execute things anyway.
agreed.
i think if one has a tight coupling like between the os and the fs
this may
make sense, but i see the repo/sling coupling much looser so i would
probably just go for the read privilege. the read privilege seems to
be
cause issue as far as i can tell not necessarily the execute
privilege.
right?
If the execute session only ever requires read to the areas of the
repository that are executable and no other areas, "read" will work.
If that session requires read elsewhere, then there needs to be some
other mechanism. (ideally a AccessControlPolicy (named, or list))
Ian
regards,
david
