You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@struts.apache.org by "Raintung Li (JIRA)" <ji...@apache.org> on 2016/06/15 08:20:09 UTC

[jira] [Created] (WW-4645) SecurityMemberAccess exclude class design issue

Raintung Li created WW-4645:
-------------------------------

             Summary: SecurityMemberAccess exclude class design issue 
                 Key: WW-4645
                 URL: https://issues.apache.org/jira/browse/WW-4645
             Project: Struts 2
          Issue Type: Bug
          Components: Core Actions
    Affects Versions: 2.3.20
            Reporter: Raintung Li


In the isClassExcluded method invoke targetClass.isAssignableFrom(excludedClass), that mean targetClass must be parent class of excludedClass or same as excludedClass. How can enumerate all son classes in the excluded classes? Why not opposite? I prevent the parent class, all son classes also be prevented. The EX: excludedClass.isAssignableFrom(targetClass)




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)