Modeshape applies ACL access after query limit (incorrect Feed results)

Description

The Feeds list can be off and wont show the feeds if you are logged in as a user with limited access
1) admin creates a few feeds
2) operator creates a few feeds
3) operator logs in and sees a page "showing 1-5 of 7", but the first page only has 3 entries. this is because on the first page the other 2 feeds are only available to the admin.

Note: this is also in 0.9.x releases:

in the BaseJcrProvider.java class its doing a query with a LIMIT and OFFSET.
One idea to fix this is below (not fully working, just an idea)

Environment

None

Assignee

Unassigned

Reporter

Scott Reisdorf

Labels

None

Reviewer

None

Story point estimate

None

Story Points

4

Affects versions

Priority

Medium
Configure