You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@causeway.apache.org by "Daniel Keir Haywood (Jira)" <ji...@apache.org> on 2023/03/26 12:31:00 UTC

[jira] [Updated] (CAUSEWAY-3074) Shiro - Enhanced Wildcard Permissions Don't Work as Expected

     [ https://issues.apache.org/jira/browse/CAUSEWAY-3074?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Daniel Keir Haywood updated CAUSEWAY-3074:
------------------------------------------
    Fix Version/s:     (was: 2.0.0-RC2)

> Shiro - Enhanced Wildcard Permissions Don't Work as Expected
> ------------------------------------------------------------
>
>                 Key: CAUSEWAY-3074
>                 URL: https://issues.apache.org/jira/browse/CAUSEWAY-3074
>             Project: Causeway
>          Issue Type: Bug
>          Components: Security Shiro
>    Affects Versions: 2.0.0-M7
>            Reporter: Jörg Rade
>            Priority: Major
>         Attachments: knife_menu_with_x_prefix.png, knife_menu_without_reg.png
>
>
> With (shiro.ini):
> {code}
> securityManager.realms = $iniRealm
> permissionResolver = org.apache.isis.security.shiro.authorization.IsisPermissionResolver
> iniRealm.permissionResolver = $permissionResolver
> [...]
> guest_role = !knife:Endpoints,\
>              !knife:Releases,\
>              !knife:Configurations,\
>              !knife:RuntimeEnvironments,\
>              !knife:Comparisons,\
>              !knife:ConfigComparisons,\
>              !knife:ReleaseComparisons,\
>              !knife:ServiceComparisons,\
>              !knife:Diagrams,\
>              *
> {code}
> I get  !knife_menu_without_reg.png! 
> And with a prefix (be it "reg/", "xxx/", or "x/") I get an output that's closer to my expectations:
>  !knife_menu_with_x_prefix.png! 
> Nevertheless, my expectation is, that
> * RuntimeEnvironments,
> * Comparisons, and
> * Diagrams 
> would be omitted as well.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)