You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ranger.apache.org by ra...@apache.org on 2026/07/21 15:31:32 UTC
(ranger) branch master updated: RANGER-5677: make non-secure download endpoint patterns slash-insensitive (#1062)
This is an automated email from the ASF dual-hosted git repository.
ramackri pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ranger.git
The following commit(s) were added to refs/heads/master by this push:
new 2b158c126 RANGER-5677: make non-secure download endpoint patterns slash-insensitive (#1062)
2b158c126 is described below
commit 2b158c126103210df70534674d4b77b063f7af72
Author: Vyom Mani Tiwari <vy...@gmail.com>
AuthorDate: Tue Jul 21 21:01:25 2026 +0530
RANGER-5677: make non-secure download endpoint patterns slash-insensitive (#1062)
---
.../main/resources/conf.dist/security-applicationContext.xml | 10 +++++-----
1 file changed, 5 insertions(+), 5 deletions(-)
diff --git a/security-admin/src/main/resources/conf.dist/security-applicationContext.xml b/security-admin/src/main/resources/conf.dist/security-applicationContext.xml
index bbb94a3a4..a0c8ac0fc 100644
--- a/security-admin/src/main/resources/conf.dist/security-applicationContext.xml
+++ b/security-admin/src/main/resources/conf.dist/security-applicationContext.xml
@@ -43,13 +43,13 @@ http://www.springframework.org/schema/security/spring-security-oauth2-2.0.xsd">
<security:http pattern="/service/assets/policyList/*" security="none"/>
<security:http pattern="/service/assets/resources/grant" security="none"/>
<security:http pattern="/service/assets/resources/revoke" security="none"/>
- <security:http pattern="/service/gds/download/*" security="none"/>
- <security:http pattern="/service/plugins/policies/download/*" security="none"/>
+ <security:http pattern="/service/gds/download/**" security="none"/>
+ <security:http pattern="/service/plugins/policies/download/**" security="none"/>
<security:http pattern="/service/plugins/services/grant/*" security="none"/>
<security:http pattern="/service/plugins/services/revoke/*" security="none"/>
- <security:http pattern="/service/tags/download/*" security="none"/>
- <security:http pattern="/service/roles/download/*" security="none"/>
- <security:http pattern="/service/xusers/download/*" security="none"/>
+ <security:http pattern="/service/tags/download/**" security="none"/>
+ <security:http pattern="/service/roles/download/**" security="none"/>
+ <security:http pattern="/service/xusers/download/**" security="none"/>
<security:http pattern="/service/actuator/health" security="none" />
<security:http pattern="/service/metrics/**" security="none" />
<security:http disable-url-rewriting="true" use-expressions="true" create-session="always" entry-point-ref="authenticationProcessingFilterEntryPoint">