ModeShape/modeshape — pull request #1145 by lucasweb78 (2014-06-06 21:03:12+00:00)
Title: MODE-2225 - Custom AuthorizationProvider is not invoked for each child node when iterating through the child nodes of a parent node

Removed the condition that required AccessControl to be enabled when determining if the ChildResolver should check if the client has permission to access the child nodes prior to returning them. This resolves an issue where a custom AuthorizationProvider is not called when retiring child nodes for the parent node.

As per the discussion in https://issues.jboss.org/browse/MODE-2225 additional work is required before merging in order to optimize the code so that it only checks that the client has permission to access the child if either:

a) ACL's are enabled
b) The SecurityContext implements either AuthorizationProvider or AdvancedAuthorizationProvider

Previously only the ACL check was performed.