[jira] Created: (JCR-1599) LuceneQueryBuilder assumes readability of root-Node to be granted in any case.

LuceneQueryBuilder assumes readability of root-Node to be granted in any case.
------------------------------------------------------------------------------

                 Key: JCR-1599
                 URL: https://issues.apache.org/jira/browse/JCR-1599
             Project: Jackrabbit
          Issue Type: Bug
          Components: indexing
    Affects Versions: core 1.4.2
            Reporter: christian


Have a User U.
Have the User U denied to read "/".
Have the User U allowed to read "/home/u".

Any query of User U on this workspace fails with an AccessDeniedException.

The exception is caused by a call insided LuceneQueryBuilder on ln212:
NodeId id = ((NodeImpl) session.getRootNode()).getNodeId();

I couldn't find a specification that imposes the readability of root-node as a precondtion for query.
Therefore I consider this behavior as a bug.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

     [ https://issues.apache.org/jira/browse/JCR-1599?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marcel Reutegger resolved JCR-1599.
-----------------------------------

       Resolution: Fixed
    Fix Version/s: 1.5

Fixed in revision: 655917

> LuceneQueryBuilder assumes readability of root-Node to be granted in any case.
> ------------------------------------------------------------------------------
>
>                 Key: JCR-1599
>                 URL: https://issues.apache.org/jira/browse/JCR-1599
>             Project: Jackrabbit
>          Issue Type: Bug
>          Components: indexing
>    Affects Versions: core 1.4.2
>            Reporter: christian
>             Fix For: 1.5
>
>
> Have a User U.
> Have the User U denied to read "/".
> Have the User U allowed to read "/home/u".
> Any query of User U on this workspace fails with an AccessDeniedException.
> The exception is caused by a call insided LuceneQueryBuilder on ln212:
> NodeId id = ((NodeImpl) session.getRootNode()).getNodeId();
> I couldn't find a specification that imposes the readability of root-node as a precondtion for query.
> Therefore I consider this behavior as a bug.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

     [ https://issues.apache.org/jira/browse/JCR-1599?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jukka Zitting updated JCR-1599:
-------------------------------

    Affects Version/s: core 1.4.3
                       core 1.4.4
        Fix Version/s:     (was: 1.5)
                       core 1.4.5

Merged to the 1.4 branch in revision 661629.

> LuceneQueryBuilder assumes readability of root-Node to be granted in any case.
> ------------------------------------------------------------------------------
>
>                 Key: JCR-1599
>                 URL: https://issues.apache.org/jira/browse/JCR-1599
>             Project: Jackrabbit
>          Issue Type: Bug
>          Components: indexing
>    Affects Versions: core 1.4.2, core 1.4.3, core 1.4.4
>            Reporter: christian
>             Fix For: core 1.4.5
>
>
> Have a User U.
> Have the User U denied to read "/".
> Have the User U allowed to read "/home/u".
> Any query of User U on this workspace fails with an AccessDeniedException.
> The exception is caused by a call insided LuceneQueryBuilder on ln212:
> NodeId id = ((NodeImpl) session.getRootNode()).getNodeId();
> I couldn't find a specification that imposes the readability of root-node as a precondtion for query.
> Therefore I consider this behavior as a bug.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.