« Return to Thread: [jira] Created: (JCR-1599) LuceneQueryBuilder assumes readability of root-Node to be granted in any case.

[jira] Created: (JCR-1599) LuceneQueryBuilder assumes readability of root-Node to be granted in any case.

by JIRA jira@apache.org :: Rate this Message:

Reply to Author | View in Thread

LuceneQueryBuilder assumes readability of root-Node to be granted in any case.
------------------------------------------------------------------------------

                 Key: JCR-1599
                 URL: https://issues.apache.org/jira/browse/JCR-1599
             Project: Jackrabbit
          Issue Type: Bug
          Components: indexing
    Affects Versions: core 1.4.2
            Reporter: christian


Have a User U.
Have the User U denied to read "/".
Have the User U allowed to read "/home/u".

Any query of User U on this workspace fails with an AccessDeniedException.

The exception is caused by a call insided LuceneQueryBuilder on ln212:
NodeId id = ((NodeImpl) session.getRootNode()).getNodeId();

I couldn't find a specification that imposes the readability of root-node as a precondtion for query.
Therefore I consider this behavior as a bug.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

 « Return to Thread: [jira] Created: (JCR-1599) LuceneQueryBuilder assumes readability of root-Node to be granted in any case.