Ian Boston | 1 Nov 2009 17:41
Picon
Gravatar

Removed Principals make ACLs deny everything.

Looking at 1.5.7 (may also be the case in later versions)

IIUC, removing a User from the UserManager causes a  
NoSuchPrincipalException in the ACLTempate.init(...) line 113, which  
generates a deny on that node, regardless of the user accessing the  
node.

IMHO, there should be a try catch on the processing of each ACE to  
guard against this.

Removing all ACE's at the same time as removing a Principal is  
probably not practical as the PrincipalManager might (if replaced)  
lookup principals externally.

?

Can provide a patch, if this is the right approach.
Ian

Ian Boston | 1 Nov 2009 17:43
Picon
Gravatar

Re: Removed Principals make ACLs deny everything.

Sorry, see its fixed in trunk, ignore me.
Ian

On 1 Nov 2009, at 16:41, Ian Boston wrote:

> Looking at 1.5.7 (may also be the case in later versions)
>
> IIUC, removing a User from the UserManager causes a  
> NoSuchPrincipalException in the ACLTempate.init(...) line 113, which  
> generates a deny on that node, regardless of the user accessing the  
> node.
>
> IMHO, there should be a try catch on the processing of each ACE to  
> guard against this.
>
> Removing all ACE's at the same time as removing a Principal is  
> probably not practical as the PrincipalManager might (if replaced)  
> lookup principals externally.
>
> ?
>
> Can provide a patch, if this is the right approach.
> Ian
>

Picon
Favicon

Created: (JCR-2372) tomcat start up when jackrabbit Web interface

tomcat start up when jackrabbit Web interface
---------------------------------------------

                 Key: JCR-2372
                 URL: https://issues.apache.org/jira/browse/JCR-2372
             Project: Jackrabbit Content Repository
          Issue Type: Bug
         Environment: tomcat 5.5 , windows
            Reporter: nanduri gnana siva kumar

2.11.2009 11:31:18 *ERROR* RepositoryStartupServlet: RepositoryStartupServlet initializing
failed: javax.servlet.ServletException: Repository startup configuration is not valid.
(RepositoryStartupServlet.java, line 245)
avax.servlet.ServletException: Repository startup configuration is not valid.
       at org.apache.jackrabbit.j2ee.RepositoryStartupServlet.configure(RepositoryStartupServlet.java:369)

Marcel Reutegger (JIRA | 2 Nov 2009 10:11
Picon
Favicon

Created: (JCR-2373) Buffered I/O in IndexInfos

Buffered I/O in IndexInfos
--------------------------

                 Key: JCR-2373
                 URL: https://issues.apache.org/jira/browse/JCR-2373
             Project: Jackrabbit Content Repository
          Issue Type: Improvement
          Components: jackrabbit-core
            Reporter: Marcel Reutegger
            Priority: Minor

IndexInfos currently uses plain Input/OutputStreams without buffering.

Marcel Reutegger (JIRA | 2 Nov 2009 10:13
Picon
Favicon

Resolved: (JCR-2373) Buffered I/O in IndexInfos


     [
https://issues.apache.org/jira/browse/JCR-2373?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marcel Reutegger resolved JCR-2373.
-----------------------------------

       Resolution: Fixed
    Fix Version/s: 2.0.0

Implemented in revision: 831831

> Buffered I/O in IndexInfos
> --------------------------
>
>                 Key: JCR-2373
>                 URL: https://issues.apache.org/jira/browse/JCR-2373
>             Project: Jackrabbit Content Repository
>          Issue Type: Improvement
>          Components: jackrabbit-core
>            Reporter: Marcel Reutegger
>            Priority: Minor
>             Fix For: 2.0.0
>
>
> IndexInfos currently uses plain Input/OutputStreams without buffering.

Marcel Reutegger (JIRA | 2 Nov 2009 10:17
Picon
Favicon

Created: (JCR-2374) Use FieldSelector in LuceneQueryHits when reading UUID

Use FieldSelector in LuceneQueryHits when reading UUID
------------------------------------------------------

                 Key: JCR-2374
                 URL: https://issues.apache.org/jira/browse/JCR-2374
             Project: Jackrabbit Content Repository
          Issue Type: Improvement
          Components: jackrabbit-core
            Reporter: Marcel Reutegger
            Priority: Minor

LuceneQueryHits currently reads the complete lucene document. This also prevents usage of an underlying
UUID cache.

Marcel Reutegger (JIRA | 2 Nov 2009 10:23
Picon
Favicon

Resolved: (JCR-2374) Use FieldSelector in LuceneQueryHits when reading UUID


     [
https://issues.apache.org/jira/browse/JCR-2374?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marcel Reutegger resolved JCR-2374.
-----------------------------------

       Resolution: Fixed
    Fix Version/s: 2.0.0

Implemented in revision: 831833

> Use FieldSelector in LuceneQueryHits when reading UUID
> ------------------------------------------------------
>
>                 Key: JCR-2374
>                 URL: https://issues.apache.org/jira/browse/JCR-2374
>             Project: Jackrabbit Content Repository
>          Issue Type: Improvement
>          Components: jackrabbit-core
>            Reporter: Marcel Reutegger
>            Priority: Minor
>             Fix For: 2.0.0
>
>
> LuceneQueryHits currently reads the complete lucene document. This also prevents usage of an
underlying UUID cache.

Marcel Reutegger (JIRA | 2 Nov 2009 11:13
Picon
Favicon

Reopened: (JCR-2374) Use FieldSelector in LuceneQueryHits when reading UUID


     [
https://issues.apache.org/jira/browse/JCR-2374?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marcel Reutegger reopened JCR-2374:
-----------------------------------

The same actually also applies to SortedLuceneQueryHits

> Use FieldSelector in LuceneQueryHits when reading UUID
> ------------------------------------------------------
>
>                 Key: JCR-2374
>                 URL: https://issues.apache.org/jira/browse/JCR-2374
>             Project: Jackrabbit Content Repository
>          Issue Type: Improvement
>          Components: jackrabbit-core
>            Reporter: Marcel Reutegger
>            Priority: Minor
>             Fix For: 2.0.0
>
>
> LuceneQueryHits currently reads the complete lucene document. This also prevents usage of an
underlying UUID cache.

Marcel Reutegger (JIRA | 2 Nov 2009 11:13
Picon
Favicon

Updated: (JCR-2374) Use FieldSelector in Sorted/LuceneQueryHits when reading UUID


     [
https://issues.apache.org/jira/browse/JCR-2374?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marcel Reutegger updated JCR-2374:
----------------------------------

    Summary: Use FieldSelector in Sorted/LuceneQueryHits when reading UUID  (was: Use FieldSelector in
LuceneQueryHits when reading UUID)

> Use FieldSelector in Sorted/LuceneQueryHits when reading UUID
> -------------------------------------------------------------
>
>                 Key: JCR-2374
>                 URL: https://issues.apache.org/jira/browse/JCR-2374
>             Project: Jackrabbit Content Repository
>          Issue Type: Improvement
>          Components: jackrabbit-core
>            Reporter: Marcel Reutegger
>            Priority: Minor
>             Fix For: 2.0.0
>
>
> LuceneQueryHits currently reads the complete lucene document. This also prevents usage of an
underlying UUID cache.

Marcel Reutegger (JIRA | 2 Nov 2009 11:21
Picon
Favicon

Resolved: (JCR-2374) Use FieldSelector in Sorted/LuceneQueryHits when reading UUID


     [
https://issues.apache.org/jira/browse/JCR-2374?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marcel Reutegger resolved JCR-2374.
-----------------------------------

    Resolution: Fixed

Also fixed in SortedLuceneQueryHits in revision: 831844

> Use FieldSelector in Sorted/LuceneQueryHits when reading UUID
> -------------------------------------------------------------
>
>                 Key: JCR-2374
>                 URL: https://issues.apache.org/jira/browse/JCR-2374
>             Project: Jackrabbit Content Repository
>          Issue Type: Improvement
>          Components: jackrabbit-core
>            Reporter: Marcel Reutegger
>            Priority: Minor
>             Fix For: 2.0.0
>
>
> LuceneQueryHits currently reads the complete lucene document. This also prevents usage of an
underlying UUID cache.


Gmane