geronimo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Vamsavardhana Reddy (JIRA)" <>
Subject [jira] Updated: (GERONIMO-2379) Security Realms portlet - form field validation using javascript
Date Tue, 05 Sep 2006 07:50:24 GMT
     [ ]

Vamsavardhana Reddy updated GERONIMO-2379:

    Attachment: GERONIMO-2379.patch


1.  Validates name field.  Checks for empty strings.
2.  For Properties File and Certificate Properties File Realms, validates the usersURI and
groupsURI fields.  Checks for empty strings.
3.  For Databse Realm, validates userSelect and groupSelect.  If a database pool is not selected
then it will validate the JDBC parameters.  Checks for empty strings.
4. For LDAP realm, validates all fields except connectionProtocol, authentication and userRoleName
fields.  Checks for empty strings.
5.  Field validation can be controlled by setting a property like the following in
6.  In advanced configuration, validates auditPath (check for empty string), lockoutCount,
lockoutWindow, lockoutDuration (checks for integral values).  Conditional validation based
on the checkBoxes checked.

> Security Realms portlet - form field validation using javascript
> ----------------------------------------------------------------
>                 Key: GERONIMO-2379
>                 URL:
>             Project: Geronimo
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: console
>    Affects Versions: 1.1.1
>         Environment: WinXP, Sun JDK 1.4.2_08, G-1.1.1-rc1
>            Reporter: Vamsavardhana Reddy
>             Fix For: 1.2, 1.1.x, 1.1.2
>         Attachments: GERONIMO-2379.patch
> Security Realm portlet pages do not perform any field validations before submitting the
form.  Some of the fields can be validated using javascript.  Even though it is not complete
validation of every field, checks can be put in place for non empty strings, non numerical
values etc.

This message is automatically generated by JIRA.
If you think it was sent incorrectly contact one of the administrators:
For more information on JIRA, see:


View raw message