[CAUSEWAY-211] org.apache.isis.security.file.authorization.FileAuthorizor does not work

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Cannot Reproduce
• Fix Version/s: tidy-up
• Component/s: ZZZ Retired: Security: File
• Assignee: Unassigned
• Reporter: Kevin Meyer
• Created: 13/Mar/12 12:52
• Updated: 11/Sep/15 14:21
• Resolved: 16/Dec/12 23:33

Description

Even with the following in isis.properties:
isis.authorization=file
isis.authorization.file.whitelist=allow.properties
isis.authorization.file.blacklist=disallow.properties

the file authorizor is picked up:
13:41:06,268 [FileAuthorizor main INFO ] loading authorization details from allow.properties
13:41:06,269 [FileAuthorizor main INFO ] loading authorization details from allow.properties
13:41:06,269 [JmxBeanServer main INFO ] JMX bean server created
13:41:06,299 [JmxBeanServer main INFO ] file-authorizer JMX mbean registered: org.apache.isis.security.file.authorization.FileAuthorizor@34a083f2

But it does not work - services that are listed in the disallow.properties and services not listed in the allow.properties are still available.