You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@shiro.apache.org by "Brian Demers (JIRA)" <ji...@apache.org> on 2016/07/15 15:08:20 UTC

[jira] [Closed] (SHIRO-429) perms filter parsing is too sensitive to a trailing space

     [ https://issues.apache.org/jira/browse/SHIRO-429?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brian Demers closed SHIRO-429.
------------------------------
    Assignee:     (was: Les Hazlewood)

> perms filter parsing is too sensitive to a trailing space
> ---------------------------------------------------------
>
>                 Key: SHIRO-429
>                 URL: https://issues.apache.org/jira/browse/SHIRO-429
>             Project: Shiro
>          Issue Type: Bug
>          Components: Configuration
>    Affects Versions: 1.2.0, 1.2.1
>            Reporter: Raman Gupta
>             Fix For: 1.2.2
>
>
> I have a filter definition similar to:
> /some/url/** = someFilter, anotherFilter, perms["perm1", "perm2"]
> The above does not work -- the parser concatenates perm1 and perm2 into one permission, and therefore denies the request.
> The "fix" is to add a space before the trailing "]" i.e.:
> /some/url/** = someFilter, anotherFilter, perms["perm1", "perm2" ]
> This then works fine. Ouch!
> As an aside, the trace level logging logs all sorts of stuff to the logs, but fails to log anything from the perms filter explaining why the request was being denied. This is weird, to say the least.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)