[REPO-2207] Restructure the security domains - Issues

XML

Word

Printable

Main and catch-all issue for restructuring the security domains to:

get rid of needing the defaultread and defaultwrite domains
restructure domains to be all or mostly path constrained
come up with and make use of a good/meaningful naming pattern for domains, rules and authroles
consider/evaluate of introducing user roles may be needed or otherwise substantially improving and simplifying the restructuring
change or add unit/integration tests to cover the default setup and commonly needed customizations

causes

CMS-12065 Enhance and extend the Admin panels for Users, Groups and Permissions

includes

CMS-10136 Editor can only add compound prototype root nodes

REPO-2055 hipposysedit:prototype is configured in domains setup but has been a never existing nodetype

REPO-1492 Support for hierarchical domain constraint with *automatic read* access on parent nodes

REPO-2057 Remove the logic in the HippoAccessManager that grants read access to all nodes below a readable Hippo Document

REPO-2208 (optional) Rename hipposys:filter to hipposys:optional

(1 includes)