[WIP] Acl support

[lsmith77]

needs the following to be added to the <workspace> tag in the repository.xml:

        <Import>
          <ProtectedNodeImporter
class="org.apache.jackrabbit.core.xml.AccessControlImporter"/>
          <ProtectedPropertyImporter
class="org.apache.jackrabbit.core.security.user.UserImporter">
             <param name="importBehavior" value="besteffort"/>
          </ProtectedPropertyImporter>
        </Import>

requires jackalope/jackalope#274 and phpcr/phpcr-api-tests#152

TODO

• [] Figure out getSupportedPrivileges vs privilegeFromName. flat list of privileges or only jcr:all with nested?

[lsmith77]

needs to be changed to the final version

[dbu]

sample privileges response. needs to be removed again

[evert]

Crazy how much this looks like WebDAV / RFC3744

[lsmith77]

@evert this is Davex, which is based on Webdav .. infact Jackrabbit is also a Webdav server .. kind of cool huh? a content repository where a graphic designer could mount a path via webdav, mess with images there and write it back into the repo without ever touching a web interface. there is a reason Adobe bought a Jackrabbit based CMS.

[evert]

Huh! I should look into that more... Is there value in adding sabredav as a frontend for jackalope for you? Or does that not make sense.

[lsmith77]

@evert for the Jackrabbit integration we rather need a webdav client .. however at some point we might want to also provide a webdav interface for jackalope-doctrine-dbal

[dbu]

not sure if you would want to build on phpcr for that. maybe the thing would be a sabredev frontend for flysystem (which has a phpcr adapter for storage).

[evert]

flysystem would give a very weak version of your underlying data-model, only representing files and directories and basic FS operations.

With a full-blown webdav frontend, you actually get an API that allows you to query and modify properties, express/enforce/mutate ACL rules, etc.

Anyway.. could be a fun side project for me at one point :)

Sorry for hijacking this thread!

[dbu]

@evert well, jackrabbit itself only allows webdav for nodes that represent folders or files, afaik. arbitrary nodes with properties are not a concept webdav understands. but i certainly won't stop you if you want to give things a try. i suggest you open an issue on the phpcr repository when you are ready to hack on this, for further discussion. just make sure to write against the PHPCR interfaces, and not limit yourself to a concrete implementation like jackalope-jackrabbit.

[evert]

That's definitely not true! webdav certainly supports any type of node :) we have many non-file nodes, such as principal nodes that have no mapping to a GET request