You are viewing a plain text version of this content. The canonical link for it is here.
Posted to slide-dev@jakarta.apache.org by ms...@apache.org on 2002/02/06 03:35:34 UTC
cvs commit: jakarta-slide/src/share/org/apache/slide/security SecurityImpl.java
msmith 02/02/05 18:35:34
Modified: src/share/org/apache/slide/security SecurityImpl.java
Log:
Bugfix to previous security fix - typo made group permissions more or less
completely broken.
Revision Changes Path
1.29 +9 -6 jakarta-slide/src/share/org/apache/slide/security/SecurityImpl.java
Index: SecurityImpl.java
===================================================================
RCS file: /home/cvs/jakarta-slide/src/share/org/apache/slide/security/SecurityImpl.java,v
retrieving revision 1.28
retrieving revision 1.29
diff -u -r1.28 -r1.29
--- SecurityImpl.java 31 Jan 2002 05:36:11 -0000 1.28
+++ SecurityImpl.java 6 Feb 2002 02:35:34 -0000 1.29
@@ -1,7 +1,7 @@
/*
- * $Header: /home/cvs/jakarta-slide/src/share/org/apache/slide/security/SecurityImpl.java,v 1.28 2002/01/31 05:36:11 msmith Exp $
- * $Revision: 1.28 $
- * $Date: 2002/01/31 05:36:11 $
+ * $Header: /home/cvs/jakarta-slide/src/share/org/apache/slide/security/SecurityImpl.java,v 1.29 2002/02/06 02:35:34 msmith Exp $
+ * $Revision: 1.29 $
+ * $Date: 2002/02/06 02:35:34 $
*
* ====================================================================
*
@@ -77,7 +77,7 @@
* Security helper.
*
* @author <a href="mailto:remm@apache.org">Remy Maucherat</a>
- * @version $Revision: 1.28 $
+ * @version $Revision: 1.29 $
*/
public final class SecurityImpl implements Security {
@@ -527,13 +527,16 @@
.getLinkedUri() :
childNode.getUri() ;
+ String testUri;
if(!childSubjectUri.endsWith("/"))
- childSubjectUri = childSubjectUri+"/";
+ testUri = childSubjectUri+"/";
+ else
+ testUri = childSubjectUri;
boolean match = subjectUri.toString().
equals(childSubjectUri) ||
subjectUri.toString().
- startsWith(childSubjectUri+"/");
+ startsWith(testUri);
match &= actionUri.toString().
startsWith(permission.getActionUri());
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>