- Fix JCR security model initialisation order

[lgpl/argeo-commons.git] / org.argeo.cms / src / org / argeo / cms / internal / useradmin / SimpleJcrSecurityModel.java

diff --git a/org.argeo.cms/src/org/argeo/cms/internal/useradmin/SimpleJcrSecurityModel.java b/org.argeo.cms/src/org/argeo/cms/internal/useradmin/SimpleJcrSecurityModel.java
index 7c4685304b0d16bd67909b74f4616e153f5fa145..9d26f13352ffbccbfb5ed9a6f237f0be2a707b91 100644 (file)
--- a/org.argeo.cms/src/org/argeo/cms/internal/useradmin/SimpleJcrSecurityModel.java
+++ b/org.argeo.cms/src/org/argeo/cms/internal/useradmin/SimpleJcrSecurityModel.java
@@ -51,14 +51,15 @@ public class SimpleJcrSecurityModel implements JcrSecurityModel {
        @Override
        public void init(Session adminSession) throws RepositoryException {
                JcrUtils.mkdirs(adminSession, homeBasePath);
-
                JcrUtils.mkdirs(adminSession, peopleBasePath);
+               adminSession.save();
+
+               JcrUtils.addPrivilege(adminSession, homeBasePath,
+                               UserAccessControlProvider.USER_ADMIN_GROUP_NAME,
+                               Privilege.JCR_READ);
                JcrUtils.addPrivilege(adminSession, peopleBasePath,
                                UserAccessControlProvider.USER_ADMIN_GROUP_NAME,
                                Privilege.JCR_ALL);
-               // JcrUtils.addPrivilege(adminSession, "/",
-               // UserAccessControlProvider.USER_ADMIN_GROUP_NAME,
-               // Privilege.JCR_READ);
        }
 
        public synchronized Node sync(Session session, String username,