You are viewing an old version of this page. View the current version.
Compare with Current
View Page History
Version 1
Next »
Goal
- We want to move the ACL checks to the JCR layer
Reasoning
- better performance
- JCR repository can be exposed otherwise (the ACLs are then still taken into account)
- we want to use the JCR API without needing to wrap the objects everywhere
Resources
Conclusion
- we cannot use "Resource-based ACLs". We had to update all the nodes on ACL changes and the permissions are only inherited on creation.
- we will provide a custom AccessControlManager. This is very similar to our current solution, its not tied to the jackrabbit API.
Next Steps
- check if this solution also works with ModeShape
