svn commit: r926247 - /incubator/lcf/trunk/modules/connectors/jdbc/connector/org/apache/lcf/crawler/connectors/jdbc/JDBCConnector.java

[kw...@apache.org]

Author: kwright
Date: Mon Mar 22 18:28:33 2010
New Revision: 926247

URL: http://svn.apache.org/viewvc?rev=926247&view=rev
Log:
Fix JDBC connector security so that empty version queries do not necessarily cause deny access token to be emitted.

Modified:
    incubator/lcf/trunk/modules/connectors/jdbc/connector/org/apache/lcf/crawler/connectors/jdbc/JDBCConnector.java

Modified: incubator/lcf/trunk/modules/connectors/jdbc/connector/org/apache/lcf/crawler/connectors/jdbc/JDBCConnector.java
URL: http://svn.apache.org/viewvc/incubator/lcf/trunk/modules/connectors/jdbc/connector/org/apache/lcf/crawler/connectors/jdbc/JDBCConnector.java?rev=926247&r1=926246&r2=926247&view=diff
==============================================================================
--- incubator/lcf/trunk/modules/connectors/jdbc/connector/org/apache/lcf/crawler/connectors/jdbc/JDBCConnector.java (original)
+++ incubator/lcf/trunk/modules/connectors/jdbc/connector/org/apache/lcf/crawler/connectors/jdbc/JDBCConnector.java Mon Mar 22 18:28:33 2010
@@ -549,7 +549,10 @@ public class JDBCConnector extends org.a
                     // Note: This should really depend on whether the connection uses the default AD authority or not, but most of the time
                     // this is true.  Unfortunately, without an API change, we don't get the "usesDefaultAuthority" flag passed into
                     // processDocuments() at this time; when that is changed, make the following conditional on that flag being true.
-                    denyAcls = new String[]{defaultAuthorityDenyToken};
+                    if (specAcls.length != 0)
+		      denyAcls = new String[]{defaultAuthorityDenyToken};
+		    else
+		      denyAcls = new String[0];
                   }
                   else
                   {