Page History

...

URI access security

URI security is checkecked checked by the 

URI permissions are granted by ACLs Access Control Lists (ACL). An ACL grants access to a path for getGet or getGet & postPost.get => grants

• Get – Grants the HTTP method GET for a given URI.

...

• Get & Post – Grants the HTTP methods GET, PUT, POST and DELETE for a given URI.

URI access is checked for every endpoint.

JCR access security

JCR acces access security is a feature of the JCR standard (defined by JCR JSR-170 and JSR-283). JCR access is granted per workspace on path level - it can grant the permision to read or to read&write. It can grant Read-only or Read/Write permission.

When using endpoints dealing with JCR repositories - (nodes and properties to read and write -, delivery to read only - ) the given user must have an appropriate role which that provides JCR permissions for the given method.

JCR access security is checked on every endpoint dealing which reads or writes JCR data. (

Exception: It can be bypassed for the delivery endpoint for testing reasonspurposes.)

Specific role based security applied to commands

...

...

If the endpoint triggers commands - the command definition grants access via specifically defined roles defined per command ... (oder so ähnlich ...).

...