[jboss-cvs] JBossAS SVN: r57431 - branches/Branch_3_2/security/src/main/org/jboss/security/auth/spi

[jboss-cvs-commits at lists.jboss.org]

Author: dimitris at jboss.org
Date: 2006-10-04 14:09:06 -0400 (Wed, 04 Oct 2006)
New Revision: 57431

Modified:
   branches/Branch_3_2/security/src/main/org/jboss/security/auth/spi/Util.java
Log:
JBAS-3742 - skip potential '.' in targetUser

Modified: branches/Branch_3_2/security/src/main/org/jboss/security/auth/spi/Util.java
===================================================================
--- branches/Branch_3_2/security/src/main/org/jboss/security/auth/spi/Util.java	2006-10-04 17:58:31 UTC (rev 57430)
+++ branches/Branch_3_2/security/src/main/org/jboss/security/auth/spi/Util.java	2006-10-04 18:09:06 UTC (rev 57431)
@@ -79,7 +79,9 @@
          String user = (String) users.nextElement();
          String value = roles.getProperty(user);
          // See if this entry is of the form targetUser[.GroupName]=roles
-         int index = user.indexOf(roleGroupSeperator);
+         // JBAS-3742 - skip potential '.' in targetUser
+         int index = user.indexOf(roleGroupSeperator, targetUser.length());
+         
          boolean isRoleGroup = false;
          boolean userMatch = false;
          if (index > 0 && targetUser.regionMatches(0, user, 0, index) == true)