[
https://issues.apache.org/jira/browse/WOOKIE-305?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13190112#comment-13190112
]
Scott Wilson commented on WOOKIE-305:
-------------------------------------
The original logic I was working to was that a DENY would always override ALLOW
as multiple policies could apply within the same scope. I hadn't really thought
about duplicates - it doesn't really matter that much as long as the behaviour
of the system is consistent with the set of policies in the policy file.
I think merging duplicates should be OK, as long as you never replace/update a
DENY with ALLOW.
> Policies allow you to define the same policy twice - once with ALLOW and once
> with DENY
> ---------------------------------------------------------------------------------------
>
> Key: WOOKIE-305
> URL: https://issues.apache.org/jira/browse/WOOKIE-305
> Project: Wookie
> Issue Type: Bug
> Components: Server
> Affects Versions: 0.9.2
> Environment: Win x86 sp1.
> Reporter: Paul Sharples
> Fix For: 0.9.2
>
> Attachments: Policies.java.patch
>
>
> To replicate start wookie and goto the polices part of the admin section
> (viewwhitelist.jsp).
> Notice how the weather widgets policy is already there...
> http://www.getwookie.org/widgets/weather http://newsrss.bbc.co.uk:80 ALLOW
> Next in the box 'add a policy' below the list add the following to change
> this entry to denied
> http://www.getwookie.org/widgets/weather http://newsrss.bbc.co.uk:80 DENY
> I would expect the original entry to update, but instead there are now two
> entries for the same policy.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
