[jboss-jira] [JBoss JIRA] (SECURITY-663) ContextPolicy.toString() should be improved
Josef Cacek (JIRA)
jira-events at lists.jboss.org
Fri Jun 22 07:58:12 EDT 2012
Josef Cacek created SECURITY-663:
------------------------------------
Summary: ContextPolicy.toString() should be improved
Key: SECURITY-663
URL: https://issues.jboss.org/browse/SECURITY-663
Project: PicketBox (JBoss Security and Identity Management)
Issue Type: Bug
Security Level: Public (Everyone can see)
Affects Versions: PicketBox_v4_0_9.Final
Reporter: Josef Cacek
Assignee: Anil Saldhana
Priority: Minor
ContextPolicy.toString() method, which is used for instance by DelegatingPolicy.listContextPolicies(), should return more valid (XML-like) output. There are missing right quotes for permission type attribute in UncheckedPermissions and RolePermissions sections.
I would also use only a class name (getClass().getName()) as a value for permission type, so it's
<Permission type='javax.security.jacc.WebUserDataPermission' name='/' actions='null' />
instead of
<Permission type='class javax.security.jacc.WebUserDataPermission' name='/' actions='null' />
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
More information about the jboss-jira
mailing list