[ROL-405] getConfigPath() in RollerContext.java doesn't handle SecurityException

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.9.8.2
• Fix Version/s: 1.1
• Browser Version: IE 6.01 SP1
• Database: MySQL 4.0.20a
• JDK Version: 1.4.2_04
• O/S Version: Windows XP SP1 / RedHat Advanced Server 7
• Assignee: Anil Gangolli
• Reporter: Marcio Avila
• Created: 20/Jun/04 04:17
• Updated: 04/Mar/05 23:32
• Resolved: 04/Mar/05 23:32

Description

When the method getConfigPath() tries to look for roller-config.xml at user.home with new File(configPath).exists() [line 468 of RollerContext.java version 0.9.8.2], the executing user could not allow access to its home directory and, in this case, a SecurityException is raised and not handled.
The natural handling should be treat a file security exception the same as a "file not found".

So, line 448:
if (!new File(configPath).exists())

should be replaced by:
boolean homeConfig;
try

{ homeConfig = new File(configPath).exists(); }

catch (SecurityException se)

{ homeConfig = false; mLogger.info("Permission denied at '" + configPath + "'"); }

if (!homeConfig)