This is an automated email from the ASF dual-hosted git repository.
ramackri pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ranger.git
The following commit(s) were added to refs/heads/master by this push:
new 2b158c126 RANGER-5677: make non-secure download endpoint patterns
slash-insensitive (#1062)
2b158c126 is described below
commit 2b158c126103210df70534674d4b77b063f7af72
Author: Vyom Mani Tiwari <[email protected]>
AuthorDate: Tue Jul 21 21:01:25 2026 +0530
RANGER-5677: make non-secure download endpoint patterns slash-insensitive
(#1062)
---
.../main/resources/conf.dist/security-applicationContext.xml | 10 +++++-----
1 file changed, 5 insertions(+), 5 deletions(-)
diff --git
a/security-admin/src/main/resources/conf.dist/security-applicationContext.xml
b/security-admin/src/main/resources/conf.dist/security-applicationContext.xml
index bbb94a3a4..a0c8ac0fc 100644
---
a/security-admin/src/main/resources/conf.dist/security-applicationContext.xml
+++
b/security-admin/src/main/resources/conf.dist/security-applicationContext.xml
@@ -43,13 +43,13 @@
http://www.springframework.org/schema/security/spring-security-oauth2-2.0.xsd";>
<security:http pattern="/service/assets/policyList/*" security="none"/>
<security:http pattern="/service/assets/resources/grant"
security="none"/>
<security:http pattern="/service/assets/resources/revoke"
security="none"/>
- <security:http pattern="/service/gds/download/*" security="none"/>
- <security:http pattern="/service/plugins/policies/download/*"
security="none"/>
+ <security:http pattern="/service/gds/download/**" security="none"/>
+ <security:http pattern="/service/plugins/policies/download/**"
security="none"/>
<security:http pattern="/service/plugins/services/grant/*"
security="none"/>
<security:http pattern="/service/plugins/services/revoke/*"
security="none"/>
- <security:http pattern="/service/tags/download/*" security="none"/>
- <security:http pattern="/service/roles/download/*" security="none"/>
- <security:http pattern="/service/xusers/download/*" security="none"/>
+ <security:http pattern="/service/tags/download/**" security="none"/>
+ <security:http pattern="/service/roles/download/**" security="none"/>
+ <security:http pattern="/service/xusers/download/**" security="none"/>
<security:http pattern="/service/actuator/health" security="none" />
<security:http pattern="/service/metrics/**" security="none" />
<security:http disable-url-rewriting="true" use-expressions="true"
create-session="always"
entry-point-ref="authenticationProcessingFilterEntryPoint">
