Uploaded image for project: 'Wicket'
  1. Wicket
  2. WICKET-3240

AnnotationsRoleAuthorizationStrategy isInstantiationAuthorized package==false, class==true returns true

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Trivial
    • Resolution: Fixed
    • 1.5-M3
    • 1.5-RC1
    • wicket-auth-roles
    • None
    • all

    Description

      In the class AnnotationsRoleAuthorizationStrategy's isInstantiationAuthorized method if
      the package authorization is false but the class authorization is true, then the user
      will be authorized.
      Maybe, check the class authorization only if the authorized variable is true.

      Attachments

        Activity

          People

            mgrigorov Martin Tzvetanov Grigorov
            emberson Richard Emberson
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: