Details
-
Bug
-
Status: Closed
-
High
-
Resolution: Fixed
-
None
-
None
-
None
Description
Although of course the HippoAccessManager would never pass a node that is not allowed to be read, the authorization query should always be in sync with the HippoAccessManager
However a mistake was committed where jcr sessions that were marked as system user were treated as JCR System Sessions.
This is confusing: A User can be marked system, but this is something completely else than being a JCR System Session.
Follow-up issue REPO-2278 will address the confusion, this issue fixes the resulting bug.