AEM Project Build Issue - CQRules:CQBP-84 - Netcentric:accesscontroltool-package - product interface org.apache.jackrabbit.api.security.user.Query should not be implemented by custom code. | Community
Skip to main content
Rohan_Garg
Community Advisor
Rohan_GargCommunity Advisor
Community Advisor
September 14, 2023
Solved

AEM Project Build Issue - CQRules:CQBP-84 - Netcentric:accesscontroltool-package - product interface org.apache.jackrabbit.api.security.user.Query should not be implemented by custom code.

  • September 14, 2023
  • 1 reply
  • 2457 views

Hi All,

 

We have recently had this build issue come up in our deployment pipeline which states the following - 

Rule - CQRules:CQBP-84

Issue - The product interface org.apache.jackrabbit.api.security.user.Query annotated with @ProviderType should not be implemented by custom code.

 

This is being reported at below file locations - 

Netcentric:accesscontroltool-package:3.0.9
Netcentric:accesscontroltool-package:3.0.9

 

The product interface org.apache.jackrabbit.api.security.user.Query annotated with @ProviderType should not be implemented by custom code. Detected in biz.netcentric.cq.tools.actool.dumpservice.impl.DumpServiceImpl$1 contained in /apps/netcentric/actool/install/accesscontroltool-bundle-3.0.9.jar.

The product interface org.apache.jackrabbit.api.security.user.Query annotated with @ProviderType should not be implemented by custom code. Detected in biz.netcentric.cq.tools.actool.authorizableinstaller.impl.AuthInstallerUserManagerPrefetchingImpl$1 contained in /apps/netcentric/actool/install/accesscontroltool-bundle-3.0.9.jar.

 

The weird part is the issue has started showing up recently (It was not there in our last build done on Sept 08, 2023)

Any ideas on how to troubleshoot this issue? As far as I can tell the netcentric jar is using Query interface and thus lies beyond our custom application codebase.

 

@aanchal-sikka, @arunpatidar, @estebanbustamante, @joerghoh, @harwinder-singh,

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by aanchal-sikka

Hello @rohan_garg 

 

The issue has been reported on https://github.com/Netcentric/accesscontroltool/issues/671

 

The fix is currently in review https://github.com/apache/jackrabbit-oak/pull/1121

 

Should be available in next version of netcentric tool

1 reply

aanchal-sikka
Community Advisor
aanchal-sikkaCommunity AdvisorAccepted solution
Community Advisor
September 14, 2023

Hello @rohan_garg 

 

The issue has been reported on https://github.com/Netcentric/accesscontroltool/issues/671

 

The fix is currently in review https://github.com/apache/jackrabbit-oak/pull/1121

 

Should be available in next version of netcentric tool

Aanchal Sikka
    M
    MATTHEW_AST
    New Member
    September 15, 2023

    Can the AEM code quality pipeline be fixed to not randomly fail builds due to new issues it finds with existing dependency packages that haven't been changed since the last build?

      M
      MATTHEW_AST
      New Member
      September 15, 2023

      In our case, the server we're deploying to is running some older version of jackrabbit oak-core: 1.22.13. This issue looks like it was introduced in 1.56.0, which means somehow the cloud pipeline is scanning against the latest versions of packages that don't even apply to the server that's being deployed to. This is a serious issue with the code quality pipeline.

        Terms & ConditionsAccessibility statement

        Loading footer...