You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2013/09/11 18:43:52 UTC

[jira] [Commented] (KNOX-124) Fix the OR semantics in AclAuthz

    [ https://issues.apache.org/jira/browse/KNOX-124?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13764468#comment-13764468 ] 

ASF subversion and git services commented on KNOX-124:
------------------------------------------------------

Commit 5e056a15d5b259ac39ef4fa7123969e7692b9b95 in branch refs/heads/master from [~lmccay]
[ https://git-wip-us.apache.org/repos/asf?p=incubator-knox.git;h=5e056a1 ]

KNOX-124 - fixed OR semantics for wildcards
                
> Fix the OR semantics in AclAuthz
> --------------------------------
>
>                 Key: KNOX-124
>                 URL: https://issues.apache.org/jira/browse/KNOX-124
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>            Reporter: Larry McCay
>            Assignee: Larry McCay
>             Fix For: 0.3.0
>
>
> Wildcard '*' characters in the ACL definition for acl.processing.mode of OR provide inappropriate access to the protected resource. Change to effective disregard wildcard acls by denying access for them. The fact that we are ORing them will result in the desired protection.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira