[jboss-jira] [JBoss JIRA] (SECURITY-663) ContextPolicy.toString() should be improved

Josef Cacek (JIRA) jira-events at lists.jboss.org
Wed Jun 27 05:17:12 EDT 2012


    [ https://issues.jboss.org/browse/SECURITY-663?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12703499#comment-12703499 ] 

Josef Cacek commented on SECURITY-663:
--------------------------------------

The {{"<RolePermssions>"}} and {{"</RolePermssions>"}} strings should be also fixed (missing "i").
                
> ContextPolicy.toString() should be improved
> -------------------------------------------
>
>                 Key: SECURITY-663
>                 URL: https://issues.jboss.org/browse/SECURITY-663
>             Project: PicketBox (JBoss Security and Identity Management)
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>    Affects Versions: PicketBox_v4_0_9.Final
>            Reporter: Josef Cacek
>            Assignee: Anil Saldhana
>            Priority: Minor
>
> ContextPolicy.toString() method, which is used for instance by DelegatingPolicy.listContextPolicies(), should return more valid (XML-like) output. There are missing right quotes for permission type attribute in UncheckedPermissions and RolePermissions sections.
> I would also use only a class name (getClass().getName()) as a value for permission type, so it's
> <Permission type='javax.security.jacc.WebUserDataPermission' name='/' actions='null' />
> instead of 
> <Permission type='class javax.security.jacc.WebUserDataPermission' name='/' actions='null' />

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


More information about the jboss-jira mailing list