[jboss-jira] [JBoss JIRA] (JBEE-142) JACC permissions with HTTP method exception list are not correctly implemented

Stefan Guilhen (JIRA) jira-events at lists.jboss.org
Thu Sep 26 15:55:03 EDT 2013


Stefan Guilhen created JBEE-142:
-----------------------------------

             Summary:  JACC permissions with HTTP method exception list are not correctly implemented
                 Key: JBEE-142
                 URL: https://issues.jboss.org/browse/JBEE-142
             Project: JBoss JavaEE Spec APIs
          Issue Type: Bug
          Components: jboss-jacc-api
    Affects Versions: JavaEE 6 Spec APIs 3.0.2.Final
            Reporter: Stefan Guilhen
            Assignee: Stefan Guilhen


As reported by Josef Cacek: JACC 1.1 permissions WebResourcePermission and WebUserDataPermission with an HTTP method exception list as actions should provide the correct list instead of null when calling getActions() method on them. Look at section "3.1.3.4 - Example" of the JACC 1.1 specification.

There is also a second problem related - WebUserDataPermission.parseActions(String) method should remove the exclamation mark from the actions local variable before calling
{code} 
Object[] methodInfo = WebResourcePermission.canonicalMethods(actions);
{code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the jboss-jira mailing list