shiro-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Brian Demers (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (SHIRO-429) perms filter parsing is too sensitive to a trailing space
Date Fri, 15 Jul 2016 15:08:20 GMT

     [ https://issues.apache.org/jira/browse/SHIRO-429?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Brian Demers updated SHIRO-429:
-------------------------------
    Fix Version/s:     (was: 1.3.0)

> perms filter parsing is too sensitive to a trailing space
> ---------------------------------------------------------
>
>                 Key: SHIRO-429
>                 URL: https://issues.apache.org/jira/browse/SHIRO-429
>             Project: Shiro
>          Issue Type: Bug
>          Components: Configuration
>    Affects Versions: 1.2.0, 1.2.1
>            Reporter: Raman Gupta
>            Assignee: Les Hazlewood
>             Fix For: 1.2.2
>
>
> I have a filter definition similar to:
> /some/url/** = someFilter, anotherFilter, perms["perm1", "perm2"]
> The above does not work -- the parser concatenates perm1 and perm2 into one permission,
and therefore denies the request.
> The "fix" is to add a space before the trailing "]" i.e.:
> /some/url/** = someFilter, anotherFilter, perms["perm1", "perm2" ]
> This then works fine. Ouch!
> As an aside, the trace level logging logs all sorts of stuff to the logs, but fails to
log anything from the perms filter explaining why the request was being denied. This is weird,
to say the least.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message