You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@geode.apache.org by "Donal Evans (Jira)" <ji...@apache.org> on 2019/10/31 18:38:00 UTC

[jira] [Assigned] (GEODE-7396) JavaBeanAccessorMethodAuthorizer does not authorize methods on java.io classes

     [ https://issues.apache.org/jira/browse/GEODE-7396?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Donal Evans reassigned GEODE-7396:
----------------------------------

    Assignee: Donal Evans

> JavaBeanAccessorMethodAuthorizer does not authorize methods on java.io classes
> ------------------------------------------------------------------------------
>
>                 Key: GEODE-7396
>                 URL: https://issues.apache.org/jira/browse/GEODE-7396
>             Project: Geode
>          Issue Type: Bug
>            Reporter: Donal Evans
>            Assignee: Donal Evans
>            Priority: Major
>              Labels: GeodeCommons
>
> The following test failed using an authorizer with java.lang and java.io packages specified as allowed. It's unclear at this time if the problem is related specifically to the java.io package or if it is a problem with how the JavaBeanAccessorMethodAuthorizer handles multiple parameters.
>  {noformat} 
> @Test
>   public void test() throws NoSuchMethodException {
>     Method disallowedJavaIOMethod = File.class.getMethod("getPath");
>     assertThat(authorizerWithStringAndIOPackageSpecified.authorize(allowedJavaIOMethod, new File(""))).isTrue();
>   } 
> {noformat}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)