Hi, I haven’t found any hint in https://jackrabbit.apache.org/oak/docs/security/authorization/restriction.html on when the restrictions are being evaluated. Is it before the changes have been committed, afterwards or both?
This is particularly crucial to know for restrictions evaluating properties which are modified through a commit (e.g. a node name through Session.move(…), a property value modification via Node.setProperty(…), a primary type change via Node.setPrimaryType()). For example is it possible to restrict writing of nodes with a particular type (irrespective of their location and parent node structure) to only a certain principal? Thanks in advance, Konrad
