[jira] [Resolved] (WICKET-5094) ISecuritySettings#getEnforceMounts(true) prevents access to *all* non-mounted bookmarkable pages

["Sven Meier (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/WICKET-5094?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sven Meier resolved WICKET-5094.
--------------------------------

       Resolution: Fixed
    Fix Version/s: 1.5.11
                   6.7.0

changed to enforce for mount pages only
                
> ISecuritySettings#getEnforceMounts(true) prevents access to *all* non-mounted bookmarkable pages
> ------------------------------------------------------------------------------------------------
>
>                 Key: WICKET-5094
>                 URL: https://issues.apache.org/jira/browse/WICKET-5094
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket
>    Affects Versions: 6.6.0, 1.5.10
>            Reporter: Sven Meier
>            Assignee: Sven Meier
>             Fix For: 6.7.0, 1.5.11
>
>
> ISecuritySettings#setEnforceMounts(true) is meant to be used to prevent access to mounted-pages via BookmarkableMapper, e.g. when Page1.class is mounted:
>    http://localhost:8080/niceurl/a/nice/path/to/the/first/page
> ... then the following url will not be accepted:
>    http://localhost:8080/niceurl/wicket/bookmarkable/org.apache.wicket.examples.niceurl.Page1
> But starting with Wicket 1.5.x access to *all* non-mounted pages via BookmarkableMapper is prevented, i.e. no url "http://localhost:8080/niceurl/wicket/bookmarkable/*" is matched.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira