Red Hat Training

A Red Hat training course is available for Red Hat JBoss Data Virtualization

14.7. Privileges

The JCR 2.0 API defines the following privileges:
Privilege
Description
jcr:read
The privilege to retrieve a node and get its properties and their values.
jcr:modifyProperties
The privilege to create, remove and modify the values of the properties of a node.
jcr:addChildNodes
The privilege to create child nodes of a node.
jcr:removeNode
The privilege to remove a node.
jcr:removeChildNodes
The privilege to remove child nodes of a node. In order to actually remove a node requires jcr:removeNode on that node and jcr:removeChildNodes on the parent node.
jcr:write
An aggregate privilege that contains: jcr:modifyProperties , jcr:addChildNodes , jcr:removeNode , and jcr:removeChildNodes .
jcr:readAccessControl
The privilege to read the access control settings of a node.
jcr:modifyAccessControl
The privilege to modify the access control settings of a node.
jcr:lockManagement
The privilege to lock and unlock a node.
jcr:versionManagement
The privilege to perform versioning operations on a node.
jcr:nodeTypeManagement
The privilege to add and remove mixin node types and change the primary node type of a node.
jcr:retentionManagement
The privilege to perform retention management operations on a node.
jcr:lifecycleManagement
The privilege to perform lifecycle operations on a node.
jcr:all
An aggregate privilege that contains: jcr:read , jcr:write , jcr:readAccessControl , jcr:modifyAccessControl , jcr:lockManagement , jcr:versionManagement , jcr:nodeTypeManagement , jcr:retentionManagement , and jcr:lifecycleManagement
See the javax.jcr.security.AccessControlManager API for methods to determine the privileges supported by the repository on any given node and for manually determining whether the session has particular privileges on any given node.