Comments (4)
The question is how to reliably detect if the last execution of the ACTool was based on a different Cloud Manager build or the same. Potential candidates are:
- An Environment variable (not documented by Adobe, therefore may change in the future)
- A check over all bundles to get the most recent modification date (Unclear if those dates change when a pod is restarted without a build)
- The POM version modified by the pipeline build (Unclear how to identify a bundle having that version from the POM)
from accesscontroltool.
Probably just checking if the previous log was a triggered via startup_hook_image_build
is enough.
from accesscontroltool.
Regarding the reasons to run the tool automatically on mutable content after each deployment:
- content has been modified which is being looped over with the YAML configuration or
this can happen, the question is if the deployment event is the best time to react on such changes (conceivable is also to create listeners for children-changes of all content-derived loops and then automatically run the AC tool without deployment). But then again, usually the most straight forward is not to have content-derived loops but rather define the root folders as master in the AC tool with initialContent
- ACEs have been manually modified/deleted/created which affect authorizables managed by ACTool
- Authorizables have been manually modified/deleted which are managed by ACTool
I would assume that if manual interaction is allowed (it normally should not be allowed), then it's also ok to "reset to AC Tool config" by running the AC Tool manually
Probably just checking if the previous log was a triggered via startup_hook_image_build is enough.
yes that could be an option if we want to change the behaviour - downside is that usually there is no change to be applied if the config files don't change (so the AC tool will run often in vain, especially for established platforms where the yaml files and root folders rarely change)
from accesscontroltool.
if the deployment event is the best time to react on such changes
It happens like this with AEM 6.5, therefore I would first like to align both versions before coming up with a more sophisticated option (listeners always mean quite some overhead)
then it's also ok to "reset to AC Tool config" by running the AC Tool manually
It is not so much about the additional manual step but about the principle of least surprise which is IMHO violated here.
from accesscontroltool.
Related Issues (20)
- autoCreateTestUsers needs a field for impersonators HOT 1
- java.io.IOException: Errors updating groups: [ActionCommandError [errorCode=error.command.string_expected, requestID=null, index=0, step=0, message=String too short for field: description, user=null] for empty string value of description HOT 1
- Optionally create IMS groups with product profile memberships
- Invalid index detection in the cloud HOT 1
- Validate that external roles are not used to compose other roles.
- Use license-maven-plugin to enforce correct license headers on each file
- Add permission check UI
- Support group deletions for external groups
- Deprecated Service User Mapping Detected HOT 1
- Upgrade dependency-check-maven
- AceBeanInstallerIncremental does not detect permission changes for managed authorizables outside managed paths HOT 2
- Improve naming of RuntimeHelper methods
- Support capturing groups in autoCreateTestUsers->createForGroupNamesRegEx HOT 1
- Optionally allow to set group administrators for IMS groups HOT 1
- Expose StringUtils.isEmpty and StringUtils.isBlank to EL
- AuthorizableCreatorException: errorCode=error.command.add_remove.list_too_long, message=Too many products, users or groups in Add or Remove: max is 20
- QueryHelperIT.testHasQueryIndexForACLsWithIndex sometimes fails
- Reduce IMS Update calls by first checking if entry already up to date
- ACE installation skipped for part of mutable content
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from accesscontroltool.