Sorry dropped the ball on this.

On 13.11.14 2:25 , Angela Schreiber wrote:
sure... i thought the issue reference would be enough :-)

OAK-2015 addresses a bug with the handling of jcr:all in the
permission store. more precisely: since jcr:all is a dynamic
privilege the corresponding entries in the permission store
must reflect that dynamic nature and not the set of aggregated
privileges at the point when the permission store entry is
being created.

that's imo a critical issue that will cause an inconsistent
permission store if privileges are being registered after
repository initialization.

OAK-2255 fixes a bug introduced by addressing OAK-2015.
the fix is trivial.

+1 for merging, given the potential for inconsistencies and that the fix is simple.

Michael


hope that helps
angela


On 13/11/14 13:42, "Michael Dürig" <[email protected]> wrote:



based on a discussion wrt merging fixes into the 1.0 branch,
i would like to suggest that we merge both fixes OAK-2015
and OAK-2255 into the branch.


+1

It would be helpful for people who weren't involved with the details to
add a bit of context like, why you think it is important and safe to
back port.

Michael

Reply via email to