2.10.0 forked

Open duncan-at-hiveit opened this issue 10 years ago • 0 comments

Hi there,

I've fixed a bug that looks like it was introduced between version 2.2 and 2.4 with the combining of access permissions.

In AbstractCompiledPermissions.combine(), the code was creating allow and deny combinations "cAPrivs" and "cDPrivs", but was then never using them in the returned combined Result.

The result of this is that when using the CombinedProvider, principal-based permissions were getting dropped.

Thanks, Duncan

Jun 16 '15 09:06 duncan-at-hiveit