[ 
https://issues.apache.org/jira/browse/SHIRO-429?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13633667#comment-13633667
 ] 

Les Hazlewood commented on SHIRO-429:
-------------------------------------

Nasty little bugger.  Thanks for reporting this.  Should be easy to fix.
                
> perms filter parsing is too sensitive to a trailing space
> ---------------------------------------------------------
>
>                 Key: SHIRO-429
>                 URL: https://issues.apache.org/jira/browse/SHIRO-429
>             Project: Shiro
>          Issue Type: Bug
>          Components: Configuration
>    Affects Versions: 1.2.0
>            Reporter: Raman Gupta
>
> I have a filter definition similar to:
> /some/url/** = someFilter, anotherFilter, perms["perm1", "perm2"]
> The above does not work -- the parser concatenates perm1 and perm2 into one 
> permission, and therefore denies the request.
> The "fix" is to add a space before the trailing "]" i.e.:
> /some/url/** = someFilter, anotherFilter, perms["perm1", "perm2" ]
> This then works fine. Ouch!
> As an aside, the trace level logging logs all sorts of stuff to the logs, but 
> fails to log anything from the perms filter explaining why the request was 
> being denied. This is weird, to say the least.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to