-
Bug
-
Resolution: Fixed
-
Major
-
None
-
Platform: All, OS: All
The Acegi documentation here:
http://www.acegisecurity.org/guide/springsecurity.html#filters
specifies a clear ordering of filters. In particular, the documentation states
that the RememberMeProcessingFilter should come after the
AuthenticationProcessingFilter. In SecurityFilters.groovy, it looks like
RememberMeProcessingFilter would be called before AuthenticationProcessingFilter2.
Code changed in hudson
User: : kohsuke
Path:
trunk/hudson/main/war/resources/WEB-INF/security/SecurityFilters.groovy
trunk/www/changelog.html
http://fisheye4.cenqua.com/changelog/hudson/?cs=11486
Log:
[FIXED JENKINS-2215] Changed the servlet filter ordering to match Acegi documentation.