-
Bug
-
Resolution: Fixed
-
Major
-
None
-
Platform: All, OS: All
The Acegi documentation here:
http://www.acegisecurity.org/guide/springsecurity.html#filters
specifies a clear ordering of filters. In particular, the documentation states
that the RememberMeProcessingFilter should come after the
AuthenticationProcessingFilter. In SecurityFilters.groovy, it looks like
RememberMeProcessingFilter would be called before AuthenticationProcessingFilter2.
[JENKINS-2215] Order of filters in SecurityFilter.groovy doesn't match Acegi recommendations
Resolution | New: Fixed [ 1 ] | |
Status | Original: Open [ 1 ] | New: Resolved [ 5 ] |
Status | Original: Resolved [ 5 ] | New: Closed [ 6 ] |
Workflow | Original: JNJira [ 132288 ] | New: JNJira + In-Review [ 201295 ] |
Component/s | New: _unsorted [ 19622 ] | |
Component/s | Original: security [ 15508 ] |
Code changed in hudson
User: : kohsuke
Path:
trunk/hudson/main/war/resources/WEB-INF/security/SecurityFilters.groovy
trunk/www/changelog.html
http://fisheye4.cenqua.com/changelog/hudson/?cs=11486
Log:
[FIXED JENKINS-2215] Changed the servlet filter ordering to match Acegi documentation.