You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@struts.apache.org by "Raintung Li (JIRA)" <ji...@apache.org> on 2016/06/15 08:20:10 UTC

[jira] [Updated] (WW-4645) SecurityMemberAccess exclude class design issue

     [ https://issues.apache.org/jira/browse/WW-4645?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Raintung Li updated WW-4645:
----------------------------
    Description: 
In the isClassExcluded method invoke targetClass.isAssignableFrom(excludedClass), that mean targetClass must be parent class of excludedClass or same as excludedClass. 
How can enumerate all son classes in the excluded classes? 
Why not opposite? I only prevent the parent class, all son classes also be prevented. 
The EX: excludedClass.isAssignableFrom(targetClass)


  was:
In the isClassExcluded method invoke targetClass.isAssignableFrom(excludedClass), that mean targetClass must be parent class of excludedClass or same as excludedClass. How can enumerate all son classes in the excluded classes? Why not opposite? I prevent the parent class, all son classes also be prevented. The EX: excludedClass.isAssignableFrom(targetClass)



> SecurityMemberAccess exclude class design issue 
> ------------------------------------------------
>
>                 Key: WW-4645
>                 URL: https://issues.apache.org/jira/browse/WW-4645
>             Project: Struts 2
>          Issue Type: Bug
>          Components: Core Actions
>    Affects Versions: 2.3.20
>            Reporter: Raintung Li
>
> In the isClassExcluded method invoke targetClass.isAssignableFrom(excludedClass), that mean targetClass must be parent class of excludedClass or same as excludedClass. 
> How can enumerate all son classes in the excluded classes? 
> Why not opposite? I only prevent the parent class, all son classes also be prevented. 
> The EX: excludedClass.isAssignableFrom(targetClass)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)