search

acciente / oacc-core

OACC (Object ACcess Control) is an advanced Java Application Security Framework
http://oaccframework.org/
Apache License 2.0
107 stars 23 forks source link

Getting resources by permission does not take into account domain-inherited global permissions #16

Closed fspinnenhirn closed 8 years ago

fspinnenhirn commented 9 years ago

getResourcesByPermission() and getResourcesByPermissionAndDomain() methods do not take into account global system permissions that are inherited from a domain, but instead include those resources that are directly accessible via global system permissions.

This only affects resources that are accessible solely via global system permissions inherited from a domain; resources accessible via domain-inherited global non-system permissions are included, as well as any accessible via non-global permissions.