[jboss-jira] [JBoss JIRA] Closed: (JBAS-4158) JACC:WebUserDataPermission creation for unchecked policy should consider excluded constraints

JACC:WebUserDataPermission creation for unchecked policy should consider excluded constraints --------------------------------------------------------------------------------------------- Key: JBAS-4158 URL: http://jira.jboss.com/jira/browse/JBAS-4158 Project: JBoss Application Server Issue Type: Bug Security Level: Public(Everyone can see) Components: Security Affects Versions: JBossAS-4.0.5.GA Reporter: Anil Saldhana Assigned To: Anil Saldhana Fix For: JBossAS-4.2.0.CR1 For the following bit: <security-constraint> <web-resource-collection> <web-resource-name>SecureStuff</web-resource-name> <url-pattern>/excluded.jsp</url-pattern> <http-method>POST</http-method> <http-method>GET</http-method> </web-resource-collection> <auth-constraint/> <user-data-constraint> <transport-guarantee>NONE</transport-guarantee> </user-data-constraint> </security-constraint> There is no need for the generation of a WebUserDataPermission("/excluded.jsp",null) added to the unchecked policy.