Attempt ot fix orphaned classAces, as described in #9. Class Aces are now identified by a field 'class'. Acl finder now additionally queries for class type to get all aces for an oid. There are also some changes in hydrateObjectIdentities. Because the entries are first identified by their objectIdentity ids, I added an additional step that adds the classAces for each object. I am not sure I messed up where parent aces are set though, so there might be missing something. Feedback about the code is very welcome.
Tests pass, but since several cases are never ecplicitly tested, this doesn't mean everything works. What's missing generally is testing the general Security layer with the MongoDBAclProvider.
iampersistent
commented
11 years ago
Attempt ot fix orphaned classAces, as described in #9. Class Aces are now identified by a field 'class'. Acl finder now additionally queries for class type to get all aces for an oid. There are also some changes in hydrateObjectIdentities. Because the entries are first identified by their objectIdentity ids, I added an additional step that adds the classAces for each object. I am not sure I messed up where parent aces are set though, so there might be missing something. Feedback about the code is very welcome. Tests pass, but since several cases are never ecplicitly tested, this doesn't mean everything works. What's missing generally is testing the general Security layer with the MongoDBAclProvider.