search

acciente / oacc-core

OACC (Object ACcess Control) is an advanced Java Application Security Framework
http://oaccframework.org/
Apache License 2.0
107 stars 23 forks source link

`getEffectiveResourcePermissions()` doesn't return *all* effective permissions #1

Closed fspinnenhirn closed 9 years ago

fspinnenhirn commented 9 years ago

Our current permission getters should return all effective permissions, including

getEffectiveResourcePermissions() only includes direct and resource-inherited permissions, but not the domain-inherited or global ones.

Compare with assertResourcePermissions().