Return-Path: 
 <dev-return-41445-apmail-geronimo-dev-archive=geronimo.apache.org@geronimo.apache.org>
Delivered-To: apmail-geronimo-dev-archive@www.apache.org
Received: (qmail 18737 invoked from network); 16 Nov 2006 19:02:03 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 16 Nov 2006 19:02:03 -0000
Received: (qmail 93793 invoked by uid 500); 16 Nov 2006 19:02:12 -0000
Delivered-To: apmail-geronimo-dev-archive@geronimo.apache.org
Received: (qmail 93223 invoked by uid 500); 16 Nov 2006 19:02:11 -0000
Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:dev-help@geronimo.apache.org>
list-unsubscribe: <mailto:dev-unsubscribe@geronimo.apache.org>
List-Post: <mailto:dev@geronimo.apache.org>
Reply-To: dev@geronimo.apache.org
List-Id: <dev.geronimo.apache.org>
Delivered-To: mailing list dev@geronimo.apache.org
Received: (qmail 93212 invoked by uid 99); 16 Nov 2006 19:02:11 -0000
Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 16 Nov 2006 11:02:11 -0800
X-ASF-Spam-Status: No, hits=0.0 required=10.0
	tests=
X-Spam-Check-By: apache.org
Received: from [140.211.11.4] (HELO brutus.apache.org) (140.211.11.4)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 16 Nov 2006 11:02:00 -0800
Received: from brutus (localhost [127.0.0.1])
	by brutus.apache.org (Postfix) with ESMTP id 6FE72714319
	for <dev@geronimo.apache.org>; Thu, 16 Nov 2006 11:01:40 -0800 (PST)
Message-ID: <6740409.1163703700439.JavaMail.jira@brutus>
Date: Thu, 16 Nov 2006 11:01:40 -0800 (PST)
From: "Matt Hogstrom (JIRA)" <jira@apache.org>
To: dev@geronimo.apache.org
Subject: [jira] Updated: (GERONIMO-603) IllegalArgumentException when
 deploying WebApp containing a url-pattern of /* in security-constraint
In-Reply-To: <857982817.1110447772874.JavaMail.jira@ajax.apache.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Virus-Checked: Checked by ClamAV on apache.org

     [ http://issues.apache.org/jira/browse/GERONIMO-603?page=all ]

Matt Hogstrom updated GERONIMO-603:
-----------------------------------

    Fix Version/s: 2.0
                       (was: 1.2)

Per Gary's comments we'll address this in 2.0

> IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint
> ----------------------------------------------------------------------------------------------------
>
>                 Key: GERONIMO-603
>                 URL: http://issues.apache.org/jira/browse/GERONIMO-603
>             Project: Geronimo
>          Issue Type: Bug
>          Components: web
>            Reporter: John Sisson
>         Assigned To: Alan Cabrera
>             Fix For: 2.0
>
>
> For example,
> <web-app>
>   ..
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>Access to all of the APP</web-resource-name>
>       <url-pattern>/*</url-pattern>
>     </web-resource-collection>
>   ..
>   </security-constraint>
>   ..
> </web-app>
> The java.lang.IllegalArgumentException("Qualifier patterns in the URLPatternSpec cannot match the first URLPattern") exception is thrown from:
> javax.security.jacc.URLPatternSpec.<init>(java.lang.String) line: 54
> javax.security.jacc.WebResourcePermission.<init>(java.lang.String, java.lang.String) line: 54
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.buildSpecSecurityConfig(..) line: 1000
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.addGBeans(..) line: 400
> Looking at the last paragraph of page 22 of the JACC spec, it seems this should be allowed as it paragraph discusses patterns being made irrelevant by the presence of the path prefix pattern "/*" in a deployment descriptor.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira