[
http://jira.magnolia.info/browse/MAGNOLIA-2020?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15685#action_15685
]
Philipp Bracher commented on MAGNOLIA-2020:
-------------------------------------------
old uri is supported by virtual uri mapping. URI security is working in that
case too
> acticaion: /ActivationHandler should be /.magnolia/activation or similra
> -------------------------------------------------------------------------
>
> Key: MAGNOLIA-2020
> URL: http://jira.magnolia.info/browse/MAGNOLIA-2020
> Project: Magnolia
> Issue Type: Improvement
> Components: activation
> Affects Versions: 3.5.3
> Reporter: Philipp Bracher
> Assignee: Philipp Bracher
> Fix For: 3.5.4
>
>
> by default all urls under .magnolia are protected by the anonymous role. So
> it makes sense to move the activation filter under this path.
> Note: this is not a security issue as such as the execution under 3.5 uses
> normal ACLs for writing or deleting
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.magnolia.info/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
----------------------------------------------------------------
for list details see
http://documentation.magnolia.info/docs/en/editor/stayupdated.html
----------------------------------------------------------------
