[JIRA] Created: (APF-1161) Broken logout behaviour when following specified line delete in security.xml

2 messages Options
Embed this post
Permalink
AppFuse - Issues mailing list

[JIRA] Created: (APF-1161) Broken logout behaviour when following specified line delete in security.xml

Reply Threaded More More options
Print post
Permalink
Broken logout behaviour when following specified line delete in security.xml
----------------------------------------------------------------------------

                 Key: APF-1161
                 URL: http://issues.appfuse.org/browse/APF-1161
             Project: AppFuse
          Issue Type: Bug
          Components: Security
    Affects Versions: 2.0.2
         Environment: struts2
            Reporter: Marek
            Assignee: Matt Raible


In security.xml there is this line:

<!-- APF-737, OK to remove line below if you're not using JSF -->
<intercept-url pattern="/**/*.html*" access="ROLE_ADMIN,ROLE_USER"/>

If the user indeed deletes the line, the logout behaviour gets broken, also when the base system is Struts2.

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.appfuse.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

AppFuse - Issues mailing list

[JIRA] Resolved: (APF-1161) Broken logout behaviour when following specified line delete in security.xml

Reply Threaded More More options
Print post
Permalink

     [ http://issues.appfuse.org/browse/APF-1161?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Matt Raible resolved APF-1161.
------------------------------

    Resolution: Duplicate

Duplicate of APF-1100.

> Broken logout behaviour when following specified line delete in security.xml
> ----------------------------------------------------------------------------
>
>                 Key: APF-1161
>                 URL: http://issues.appfuse.org/browse/APF-1161
>             Project: AppFuse
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 2.0.2
>         Environment: struts2
>            Reporter: Marek
>            Assignee: Matt Raible
>
> In security.xml there is this line:
> <!-- APF-737, OK to remove line below if you're not using JSF -->
> <intercept-url pattern="/**/*.html*" access="ROLE_ADMIN,ROLE_USER"/>
> If the user indeed deletes the line, the logout behaviour gets broken, also when the base system is Struts2.

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.appfuse.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]