Uploaded image for project: 'Magnolia'
  1. Magnolia
  2. MAGNOLIA-2313

JcrAuthorizationModule should not extend JCRAuthenticationModule

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Critical
    • 4.0, 3.6.4, 3.6.5
    • 3.6.1
    • core
    • None

    Description

      ... or at least it shouldn't call login() in the JCRAuthenticationModule.

      The problem is that JcrAuthorizationModule should be usable to handle jcr authorization (expand groups and roles to ACLs), regardless of the authentication method used. But if you try to supply a different Authorization module, at least if this module uses different callbacks from the JcrAuthenticationModule, the login() method in the JCRAuthenticationModule will never pass.

      Checklists

        Acceptance criteria

        Attachments

          Activity

            People

              fgiust Fabrizio Giustina
              fgiust Fabrizio Giustina
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Checklists

                  Bug DoR
                  Task DoD