[jira] [Commented] (ISIS-211) org.apache.isis.security.file.authorization.FileAuthorizor does not work


Dan Haywood commented on ISIS-211:

sounds more like a bug in the html viewer - perhaps it's not correctly doing the InteractionAdvisorUtils call?

> org.apache.isis.security.file.authorization.FileAuthorizor does not work
> ------------------------------------------------------------------------
>                 Key: ISIS-211
>                 URL: https://issues.apache.org/jira/browse/ISIS-211
>             Project: Isis
>          Issue Type: Bug
>          Components: Security: File
>    Affects Versions: 0.3.0-incubating
>            Reporter: Kevin Meyer
> Even with the following in isis.properties:
> isis.authorization=file
> isis.authorization.file.whitelist=allow.properties
> isis.authorization.file.blacklist=disallow.properties
> the file authorizor is picked up:
> 13:41:06,268  [FileAuthorizor       main       INFO ]  loading authorization details from allow.properties
> 13:41:06,269  [FileAuthorizor       main       INFO ]  loading authorization details from allow.properties
> 13:41:06,269  [JmxBeanServer        main       INFO ]  JMX bean server created
> 13:41:06,299  [JmxBeanServer        main       INFO ]  file-authorizer JMX mbean registered: org.apache.isis.security.file.authorization.FileAuthorizor <at> 34a083f2
> But it does not work - services that are listed in the disallow.properties and services not listed in the
allow.properties are still available.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira