Hi.

I have a few questions about ACLs in ModeShape.

Suppose you have a node called Parent with all privileges.

Now create a child node (Child1) of the Parent node and give it an empty list of ACLs.

Change the Parent node to no longer have the JCR_MODIFY_ACCESS_CONTROL privilege.

Create another child node (Child2) of the Parent node.

In this case it is not possible to assign ACLs (not even the empty list) to Child2 since the Parent does not have the JCR_MODIFY_ACCESS_CONTROL privilege.

I can still assign ACLs to Child1, though, since it was created when Parent had JCR_MODIFY_ACCESS_CONTROL.

Is this expected behaviour? Should it not be possible to assign ACLs to a Child even though the parent does not have JCR_MODIFY_ACCESS_CONTROL?

I mean, it is possible to create the child so why should it not be possible to assign ACLs to it?

Thanks in advance,

Jacob