Donal Evans created GEODE-7396:
----------------------------------

             Summary: JavaBeanAccessorMethodAuthorizer does not authorize 
methods on java.io classes
                 Key: GEODE-7396
                 URL: https://issues.apache.org/jira/browse/GEODE-7396
             Project: Geode
          Issue Type: Bug
            Reporter: Donal Evans


The following test failed using an authorizer with java.lang and java.io 
packages specified as allowed. It's unclear at this time if the problem is 
related specifically to the java.io package or if it is a problem with how the 
JavaBeanAccessorMethodAuthorizer handles multiple parameters.

 {noformat} 
@Test
  public void test() throws NoSuchMethodException {
    Method disallowedJavaIOMethod = File.class.getMethod("getPath");
    
assertThat(authorizerWithStringAndIOPackageSpecified.authorize(allowedJavaIOMethod,
 new File(""))).isTrue();
  } 
{noformat}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to