shiro-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Les Hazlewood (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (SHIRO-429) perms filter parsing is too sensitive to a trailing space
Date Wed, 17 Apr 2013 01:40:13 GMT

    [ https://issues.apache.org/jira/browse/SHIRO-429?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13633667#comment-13633667
] 

Les Hazlewood commented on SHIRO-429:
-------------------------------------

Nasty little bugger.  Thanks for reporting this.  Should be easy to fix.
                
> perms filter parsing is too sensitive to a trailing space
> ---------------------------------------------------------
>
>                 Key: SHIRO-429
>                 URL: https://issues.apache.org/jira/browse/SHIRO-429
>             Project: Shiro
>          Issue Type: Bug
>          Components: Configuration
>    Affects Versions: 1.2.0
>            Reporter: Raman Gupta
>
> I have a filter definition similar to:
> /some/url/** = someFilter, anotherFilter, perms["perm1", "perm2"]
> The above does not work -- the parser concatenates perm1 and perm2 into one permission,
and therefore denies the request.
> The "fix" is to add a space before the trailing "]" i.e.:
> /some/url/** = someFilter, anotherFilter, perms["perm1", "perm2" ]
> This then works fine. Ouch!
> As an aside, the trace level logging logs all sorts of stuff to the logs, but fails to
log anything from the perms filter explaining why the request was being denied. This is weird,
to say the least.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message