The
DefaultAccessManager
controls access by evaluating access control policies for the
Subject
attached to the
Session
this manager has been built for.
Please note the following exceptional situations:
This manager allows all privileges for a particular item if
- the Session's Subject contains a {@link SystemPrincipal} oran {@link AdminPrincipal}
It allows to access all available workspaces if
- no
WorkspaceAccessManager
is defined.
How access control policies are matched to a particular item is defined by the
AccessControlProvider
set to this AccessManager.
@see AccessManager
@see javax.jcr.security.AccessControlManager