paulsp 2002/06/18 19:37:50
Modified: src/java/org/apache/jetspeed/om/registry/base Tag:
security_14 BaseSecurityEntry.java
Log:
If no <allows> exist for the requested action when checking a user, then allow
action. Per spec.
Revision Changes Path
No revision
No revision
1.1.2.4 +2 -2
jakarta-jetspeed/src/java/org/apache/jetspeed/om/registry/base/Attic/BaseSecurityEntry.java
Index: BaseSecurityEntry.java
===================================================================
RCS file:
/home/cvs/jakarta-jetspeed/src/java/org/apache/jetspeed/om/registry/base/Attic/BaseSecurityEntry.java,v
retrieving revision 1.1.2.3
retrieving revision 1.1.2.4
diff -u -r1.1.2.3 -r1.1.2.4
--- BaseSecurityEntry.java 18 Jun 2002 06:02:35 -0000 1.1.2.3
+++ BaseSecurityEntry.java 19 Jun 2002 02:37:50 -0000 1.1.2.4
@@ -165,7 +165,7 @@
}
Map allowUserMap = (Map) allowMap.get(USER_MAP);
if (allowUserMap == null)
- return false;
+ return allowMap.isEmpty(); // If action exist and no allows, then grant
permission
boolean allow = allowUserMap.containsKey( userName);
if ( allow == false)
--
To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
