geronimo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "David Jencks (JIRA)" <j...@apache.org>
Subject [jira] Closed: (GERONIMO-603) IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint
Date Fri, 27 Jul 2007 03:49:03 GMT

     [ https://issues.apache.org/jira/browse/GERONIMO-603?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

David Jencks closed GERONIMO-603.
---------------------------------

       Resolution: Duplicate
    Fix Version/s:     (was: 2.0)
                   2.0-M2
                   1.2
         Assignee: David Jencks  (was: Alan Cabrera)

Duplicate of  	 GERONIMO-1585

> IllegalArgumentException when deploying WebApp containing a url-pattern of /* in security-constraint
> ----------------------------------------------------------------------------------------------------
>
>                 Key: GERONIMO-603
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-603
>             Project: Geronimo
>          Issue Type: Bug
>          Components: web
>            Reporter: John Sisson
>            Assignee: David Jencks
>             Fix For: 1.2, 2.0-M2
>
>
> For example,
> <web-app>
>   ..
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>Access to all of the APP</web-resource-name>
>       <url-pattern>/*</url-pattern>
>     </web-resource-collection>
>   ..
>   </security-constraint>
>   ..
> </web-app>
> The java.lang.IllegalArgumentException("Qualifier patterns in the URLPatternSpec cannot
match the first URLPattern") exception is thrown from:
> javax.security.jacc.URLPatternSpec.<init>(java.lang.String) line: 54
> javax.security.jacc.WebResourcePermission.<init>(java.lang.String, java.lang.String)
line: 54
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.buildSpecSecurityConfig(..) line:
1000
> org.apache.geronimo.jetty.deployment.JettyModuleBuilder.addGBeans(..) line: 400
> Looking at the last paragraph of page 22 of the JACC spec, it seems this should be allowed
as it paragraph discusses patterns being made irrelevant by the presence of the path prefix
pattern "/*" in a deployment descriptor.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message