[ 
http://jira.magnolia-cms.com/browse/MAGNOLIA-3915?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Daniel Lipp reopened MAGNOLIA-3915:
-----------------------------------


Looks like there's no obvious way to avoid the workaround in 4.4. For 4.5 
there's the new [ticket|http://jira.magnolia-cms.com/browse/MAGNOLIA-3914] so 
that's looks fine.

Only thing that should be changed is the unnecessary catch of the 
SecurityException and the re-throwing of the InvokationTargetException.

So my proposal for the workaround is:

{code}

        //workaround to call ExtendedAggregationState methods
        Method getSite;
        try {
            getSite = aggregationState.getClass().getMethod("getSite");
            Object sitePOJO = getSite.invoke(aggregationState);
            String siteName = (String) 
sitePOJO.getClass().getMethod("getName").invoke(sitePOJO);
            return site.equals(siteName);
        } catch (NoSuchMethodException e) {
            log.debug("Not proper ExtendedAggregationState provided");
        } catch (IllegalArgumentException e) {
            log.debug("Not proper ExtendedAggregationState provided");
        } catch (IllegalAccessException e) {
            log.debug("Not proper ExtendedAggregationState provided");
        } catch (InvocationTargetException e) {
            log.debug("Not proper ExtendedAggregationState provided");
        }
        return false;
{code}

> URI Permission assignment does not respect multi-site configuration
> -------------------------------------------------------------------
>
>                 Key: MAGNOLIA-3915
>                 URL: http://jira.magnolia-cms.com/browse/MAGNOLIA-3915
>             Project: Magnolia
>          Issue Type: Bug
>      Security Level: Public
>    Affects Versions: 4.4.2
>            Reporter: Vit Kroutil
>            Assignee: Ondřej Chytil
>             Fix For: 4.4.6
>
>
> URISecurityFilter only takes into account the path section of a URL when 
> evaluating permissions

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       


----------------------------------------------------------------
For list details, see: http://www.magnolia-cms.com/community/mailing-lists.html
Alternatively, use our forums: http://forum.magnolia-cms.com/
To unsubscribe, E-mail to: <[email protected]>
----------------------------------------------------------------

Reply via email to