Uploaded image for project: 'Magnolia'
  1. Magnolia
  2. MAGNOLIA-2313

JcrAuthorizationModule should not extend JCRAuthenticationModule

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 3.6.1
    • Fix Version/s: 4.0, 3.6.4, 3.6.5
    • Component/s: core
    • Labels:
      None

      Description

      ... or at least it shouldn't call login() in the JCRAuthenticationModule.

      The problem is that JcrAuthorizationModule should be usable to handle jcr authorization (expand groups and roles to ACLs), regardless of the authentication method used. But if you try to supply a different Authorization module, at least if this module uses different callbacks from the JcrAuthenticationModule, the login() method in the JCRAuthenticationModule will never pass.

        Attachments

          Activity

            People

            Assignee:
            fgiust Fabrizio Giustina
            Reporter:
            fgiust Fabrizio Giustina
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Date of First Response: