Better protect access to Jackrabbit user manager

[lgpl/argeo-commons.git] / security / runtime / org.argeo.security.jackrabbit / src / main / java / org / argeo / security / jackrabbit / JackrabbitSecurityModel.java

diff --git a/security/runtime/org.argeo.security.jackrabbit/src/main/java/org/argeo/security/jackrabbit/JackrabbitSecurityModel.java b/security/runtime/org.argeo.security.jackrabbit/src/main/java/org/argeo/security/jackrabbit/JackrabbitSecurityModel.java
index 25de2bea568d977b0f351ce2364f78f2ccb0666b..16dd2981d1be56fd39f6404873658fe40e1c9459 100644 (file)
--- a/security/runtime/org.argeo.security.jackrabbit/src/main/java/org/argeo/security/jackrabbit/JackrabbitSecurityModel.java
+++ b/security/runtime/org.argeo.security.jackrabbit/src/main/java/org/argeo/security/jackrabbit/JackrabbitSecurityModel.java
@@ -24,7 +24,8 @@ public class JackrabbitSecurityModel extends SimpleJcrSecurityModel {
                        .getLog(JackrabbitSecurityModel.class);
 
        @Override
-       public Node sync(Session session, String username, List<String> roles) {
+       public synchronized Node sync(Session session, String username,
+                       List<String> roles) {
                if (!(session instanceof JackrabbitSession))
                        return super.sync(session, username, roles);