You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tapestry.apache.org by "Howard M. Lewis Ship (Created) (JIRA)" <ji...@apache.org> on 2011/10/13 23:01:12 UTC

[jira] [Created] (TAP5-1696) Tapestry should include a @WhitelistOnly page that only allows access to the page when it is

Tapestry should include a @WhitelistOnly page that only allows access to the page when it is 
---------------------------------------------------------------------------------------------

                 Key: TAP5-1696
                 URL: https://issues.apache.org/jira/browse/TAP5-1696
             Project: Tapestry 5
          Issue Type: New Feature
          Components: tapestry-core
    Affects Versions: 5.3
            Reporter: Howard M. Lewis Ship


PageCatalog and ServiceStatus should be protected with this page.  A service should be used to determine if the page should be accessible. The default rule should be "localhost only".

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Closed] (TAP5-1696) Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host

Posted by "Howard M. Lewis Ship (Closed) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TAP5-1696?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Howard M. Lewis Ship closed TAP5-1696.
--------------------------------------

       Resolution: Fixed
    Fix Version/s: 5.3
         Assignee: Howard M. Lewis Ship
    
> Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host
> -------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: TAP5-1696
>                 URL: https://issues.apache.org/jira/browse/TAP5-1696
>             Project: Tapestry 5
>          Issue Type: New Feature
>          Components: tapestry-core
>    Affects Versions: 5.3
>            Reporter: Howard M. Lewis Ship
>            Assignee: Howard M. Lewis Ship
>              Labels: security
>             Fix For: 5.3
>
>
> PageCatalog and ServiceStatus should be protected with this page.  A service should be used to determine if the page should be accessible. The default rule should be "localhost only".

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (TAP5-1696) Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host

Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/TAP5-1696?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13127145#comment-13127145 ] 

Hudson commented on TAP5-1696:
------------------------------

Integrated in tapestry-trunk-freestyle #576 (See [https://builds.apache.org/job/tapestry-trunk-freestyle/576/])
    TAP5-1696: Add in support for @WhitelistAccessOnly
TAP5-1696: Change MetaWorker to no longer extend CCTW2, but expose a property that does

hlship : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1183162
Files : 
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/MetaDataConstants.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/annotations/WhitelistAccessOnly.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/annotations/package-info.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/corelib/pages/PageCatalog.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/corelib/pages/ServiceStatus.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/ComponentEventLinkEncoderImpl.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RequestImpl.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/security
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/security/ClientWhitelistImpl.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/security/LocalhostOnly.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/test/TestableRequestImpl.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/DelegatingRequest.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/Request.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/security
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/security/ClientWhitelist.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/security/WhitelistAnalyzer.java
* /tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/ComponentEventDispatcherTest.java
* /tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/ComponentEventLinkEncoderImplTest.java
* /tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/test/InternalBaseTestCase.java
* /tapestry/tapestry5/trunk/tapestry-hibernate/src/main/java/org/apache/tapestry5/hibernate/pages/Statistics.java

hlship : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1183161
Files : 
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/meta/MetaWorkerImpl.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/meta/MetaWorker.java

                
> Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host
> -------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: TAP5-1696
>                 URL: https://issues.apache.org/jira/browse/TAP5-1696
>             Project: Tapestry 5
>          Issue Type: New Feature
>          Components: tapestry-core
>    Affects Versions: 5.3
>            Reporter: Howard M. Lewis Ship
>            Assignee: Howard M. Lewis Ship
>              Labels: security
>             Fix For: 5.3
>
>
> PageCatalog and ServiceStatus should be protected with this page.  A service should be used to determine if the page should be accessible. The default rule should be "localhost only".

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Closed] (TAP5-1696) Tapestry should include a @WhitelistOnly page annotation that only allows access to the page when it is accessed from a local (or otherwise acceptable) host

Posted by "Howard M. Lewis Ship (Closed) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TAP5-1696?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Howard M. Lewis Ship closed TAP5-1696.
--------------------------------------

    Resolution: Fixed
    
> Tapestry should include a @WhitelistOnly page annotation that only allows access to the page when it is accessed from a local (or otherwise acceptable) host
> ------------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: TAP5-1696
>                 URL: https://issues.apache.org/jira/browse/TAP5-1696
>             Project: Tapestry 5
>          Issue Type: New Feature
>          Components: tapestry-core
>    Affects Versions: 5.3
>            Reporter: Howard M. Lewis Ship
>            Assignee: Howard M. Lewis Ship
>              Labels: security
>             Fix For: 5.3
>
>
> PageCatalog and ServiceStatus should be protected with this page.  A service should be used to determine if the page should be accessible. The default rule should be "localhost only".

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (TAP5-1696) Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host

Posted by "Howard M. Lewis Ship (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TAP5-1696?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Howard M. Lewis Ship updated TAP5-1696:
---------------------------------------

    Summary: Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host  (was: Tapestry should include a @WhitelistOnly page that only allows access to the page when it is )
    
> Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host
> -------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: TAP5-1696
>                 URL: https://issues.apache.org/jira/browse/TAP5-1696
>             Project: Tapestry 5
>          Issue Type: New Feature
>          Components: tapestry-core
>    Affects Versions: 5.3
>            Reporter: Howard M. Lewis Ship
>              Labels: security
>
> PageCatalog and ServiceStatus should be protected with this page.  A service should be used to determine if the page should be accessible. The default rule should be "localhost only".

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (TAP5-1696) Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host

Posted by "Howard M. Lewis Ship (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TAP5-1696?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Howard M. Lewis Ship updated TAP5-1696:
---------------------------------------

    Summary: Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host  (was: Tapestry should include a @WhitelistOnly page that only allows access to the page when it is )
    
> Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host
> -------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: TAP5-1696
>                 URL: https://issues.apache.org/jira/browse/TAP5-1696
>             Project: Tapestry 5
>          Issue Type: New Feature
>          Components: tapestry-core
>    Affects Versions: 5.3
>            Reporter: Howard M. Lewis Ship
>              Labels: security
>
> PageCatalog and ServiceStatus should be protected with this page.  A service should be used to determine if the page should be accessible. The default rule should be "localhost only".

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (TAP5-1696) Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host

Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/TAP5-1696?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13127145#comment-13127145 ] 

Hudson commented on TAP5-1696:
------------------------------

Integrated in tapestry-trunk-freestyle #576 (See [https://builds.apache.org/job/tapestry-trunk-freestyle/576/])
    TAP5-1696: Add in support for @WhitelistAccessOnly
TAP5-1696: Change MetaWorker to no longer extend CCTW2, but expose a property that does

hlship : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1183162
Files : 
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/MetaDataConstants.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/annotations/WhitelistAccessOnly.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/annotations/package-info.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/corelib/pages/PageCatalog.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/corelib/pages/ServiceStatus.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/ComponentEventLinkEncoderImpl.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/RequestImpl.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/security
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/security/ClientWhitelistImpl.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/security/LocalhostOnly.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/test/TestableRequestImpl.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/DelegatingRequest.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/Request.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/security
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/security/ClientWhitelist.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/security/WhitelistAnalyzer.java
* /tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/ComponentEventDispatcherTest.java
* /tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/services/ComponentEventLinkEncoderImplTest.java
* /tapestry/tapestry5/trunk/tapestry-core/src/test/java/org/apache/tapestry5/internal/test/InternalBaseTestCase.java
* /tapestry/tapestry5/trunk/tapestry-hibernate/src/main/java/org/apache/tapestry5/hibernate/pages/Statistics.java

hlship : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1183161
Files : 
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/internal/services/meta/MetaWorkerImpl.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/TapestryModule.java
* /tapestry/tapestry5/trunk/tapestry-core/src/main/java/org/apache/tapestry5/services/meta/MetaWorker.java

                
> Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host
> -------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: TAP5-1696
>                 URL: https://issues.apache.org/jira/browse/TAP5-1696
>             Project: Tapestry 5
>          Issue Type: New Feature
>          Components: tapestry-core
>    Affects Versions: 5.3
>            Reporter: Howard M. Lewis Ship
>            Assignee: Howard M. Lewis Ship
>              Labels: security
>             Fix For: 5.3
>
>
> PageCatalog and ServiceStatus should be protected with this page.  A service should be used to determine if the page should be accessible. The default rule should be "localhost only".

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Reopened] (TAP5-1696) Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host

Posted by "Howard M. Lewis Ship (Reopened) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TAP5-1696?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Howard M. Lewis Ship reopened TAP5-1696:
----------------------------------------

    
> Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host
> -------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: TAP5-1696
>                 URL: https://issues.apache.org/jira/browse/TAP5-1696
>             Project: Tapestry 5
>          Issue Type: New Feature
>          Components: tapestry-core
>    Affects Versions: 5.3
>            Reporter: Howard M. Lewis Ship
>            Assignee: Howard M. Lewis Ship
>              Labels: security
>             Fix For: 5.3
>
>
> PageCatalog and ServiceStatus should be protected with this page.  A service should be used to determine if the page should be accessible. The default rule should be "localhost only".

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Closed] (TAP5-1696) Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host

Posted by "Howard M. Lewis Ship (Closed) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TAP5-1696?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Howard M. Lewis Ship closed TAP5-1696.
--------------------------------------

       Resolution: Fixed
    Fix Version/s: 5.3
         Assignee: Howard M. Lewis Ship
    
> Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host
> -------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: TAP5-1696
>                 URL: https://issues.apache.org/jira/browse/TAP5-1696
>             Project: Tapestry 5
>          Issue Type: New Feature
>          Components: tapestry-core
>    Affects Versions: 5.3
>            Reporter: Howard M. Lewis Ship
>            Assignee: Howard M. Lewis Ship
>              Labels: security
>             Fix For: 5.3
>
>
> PageCatalog and ServiceStatus should be protected with this page.  A service should be used to determine if the page should be accessible. The default rule should be "localhost only".

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Reopened] (TAP5-1696) Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host

Posted by "Howard M. Lewis Ship (Reopened) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TAP5-1696?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Howard M. Lewis Ship reopened TAP5-1696:
----------------------------------------

    
> Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host
> -------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: TAP5-1696
>                 URL: https://issues.apache.org/jira/browse/TAP5-1696
>             Project: Tapestry 5
>          Issue Type: New Feature
>          Components: tapestry-core
>    Affects Versions: 5.3
>            Reporter: Howard M. Lewis Ship
>            Assignee: Howard M. Lewis Ship
>              Labels: security
>             Fix For: 5.3
>
>
> PageCatalog and ServiceStatus should be protected with this page.  A service should be used to determine if the page should be accessible. The default rule should be "localhost only".

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (TAP5-1696) Tapestry should include a @WhitelistOnly page annotation that only allows access to the page when it is accessed from a local (or otherwise acceptable) host

Posted by "Howard M. Lewis Ship (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TAP5-1696?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Howard M. Lewis Ship updated TAP5-1696:
---------------------------------------

    Summary: Tapestry should include a @WhitelistOnly page annotation that only allows access to the page when it is accessed from a local (or otherwise acceptable) host  (was: Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host)
    
> Tapestry should include a @WhitelistOnly page annotation that only allows access to the page when it is accessed from a local (or otherwise acceptable) host
> ------------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: TAP5-1696
>                 URL: https://issues.apache.org/jira/browse/TAP5-1696
>             Project: Tapestry 5
>          Issue Type: New Feature
>          Components: tapestry-core
>    Affects Versions: 5.3
>            Reporter: Howard M. Lewis Ship
>            Assignee: Howard M. Lewis Ship
>              Labels: security
>             Fix For: 5.3
>
>
> PageCatalog and ServiceStatus should be protected with this page.  A service should be used to determine if the page should be accessible. The default rule should be "localhost only".

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Closed] (TAP5-1696) Tapestry should include a @WhitelistOnly page annotation that only allows access to the page when it is accessed from a local (or otherwise acceptable) host

Posted by "Howard M. Lewis Ship (Closed) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TAP5-1696?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Howard M. Lewis Ship closed TAP5-1696.
--------------------------------------

    Resolution: Fixed
    
> Tapestry should include a @WhitelistOnly page annotation that only allows access to the page when it is accessed from a local (or otherwise acceptable) host
> ------------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: TAP5-1696
>                 URL: https://issues.apache.org/jira/browse/TAP5-1696
>             Project: Tapestry 5
>          Issue Type: New Feature
>          Components: tapestry-core
>    Affects Versions: 5.3
>            Reporter: Howard M. Lewis Ship
>            Assignee: Howard M. Lewis Ship
>              Labels: security
>             Fix For: 5.3
>
>
> PageCatalog and ServiceStatus should be protected with this page.  A service should be used to determine if the page should be accessible. The default rule should be "localhost only".

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (TAP5-1696) Tapestry should include a @WhitelistOnly page annotation that only allows access to the page when it is accessed from a local (or otherwise acceptable) host

Posted by "Howard M. Lewis Ship (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TAP5-1696?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Howard M. Lewis Ship updated TAP5-1696:
---------------------------------------

    Summary: Tapestry should include a @WhitelistOnly page annotation that only allows access to the page when it is accessed from a local (or otherwise acceptable) host  (was: Tapestry should include a @WhitelistOnly page that only allows access to the page when it is accessed from a local (or otherwise acceptable) host)
    
> Tapestry should include a @WhitelistOnly page annotation that only allows access to the page when it is accessed from a local (or otherwise acceptable) host
> ------------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: TAP5-1696
>                 URL: https://issues.apache.org/jira/browse/TAP5-1696
>             Project: Tapestry 5
>          Issue Type: New Feature
>          Components: tapestry-core
>    Affects Versions: 5.3
>            Reporter: Howard M. Lewis Ship
>            Assignee: Howard M. Lewis Ship
>              Labels: security
>             Fix For: 5.3
>
>
> PageCatalog and ServiceStatus should be protected with this page.  A service should be used to determine if the page should be accessible. The default rule should be "localhost only".

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira