Re: Strange filter behavior

Hi Dan,

The does look like a bug. I think I need to add a '$' at the front of the
regexp for the pattern to be sure that it must match from the beginning for
path-based patterns.

Please report this as a bug on SourceForge so we can track it:
http://sourceforge.net/tracker/?group_id=59484&atid=491164

-Max

----- Original Message -----
From: "Dan Payne" <[email protected]>
To: <securityfilter-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org>
Sent: Wednesday, November 13, 2002 1:36 PM
Subject: [securityfilter-user] Strange filter behavior


> My securityfilter-config.xml file has the following constraint:
>
> <security-constraint>
> <display-name>Security constraints for Administrators</display-name>
> <web-resource-collection>
> <web-resource-name>Athlete of the Week</web-resource-name>
> <url-pattern>/aow/admin/*</url-pattern>
> </web-resource-collection>
> <snip/>
> <auth-constraint>
> <role-name>admin</role-name>
> </auth-constraint>
> </security-constraint>
>
> I get the correct behavior when accessing
> http://localhost/aow/admin/index.jsp and am sent to the login page.
However,
> I posted the API for the app, which includes the package for the admin
> actions and the URL for the package containing the aow admin actions is:
> http://localhost/org/foo/webapp/actions/aow/admin/package-summary.html
>
> This URL obviously inlcludes the /aow/admin/ url-pattern and is triggering
> the security constaint. However, the url-pattern was meant by me to be
> resolved to the context root, which in this case it is not. Is this the
> appropriate behavior? a bug? an incorrect implementation on my part?
>
> Any info would be appreciated.
>
> Thanks.
>
> -Dan
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: Are you worried about
> your web server security? Click here for a FREE Thawte
> Apache SSL Guide and answer your Apache SSL security
> needs: http://www.gothawte.com/rd523.html
> _______________________________________________
> securityfilter-user mailing list
> securityfilter-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> https://lists.sourceforge.net/lists/listinfo/securityfilter-user
>




-------------------------------------------------------
This sf.net email is sponsored by: To learn the basics of securing 
your web site with SSL, click here to get a FREE TRIAL of a Thawte 
Server Certificate: http://www.gothawte.com/rd524.html