As far as registration of custom privileges the Oak implementation behaves different to Jackrabbit 2.x in the following two aspects:
IllegalStateException
if the editing session has pending changes.The following changes have been made to built-in privilege definitions:
jcr:read
is now an aggregation of rep:readNodes
and rep:readProperties
jcr:modifyProperties
is now an aggregation of rep:addProperties
, rep:alterProperties
and rep:removeProperties
rep:userManagement
rep:readNodes
rep:readProperties
rep:addProperties
rep:alterProperties
rep:removeProperties
rep:indexDefinitionManagement