[jira] Created: (OFBIZ-3861) <security direct-request="false"/> does not work

[Nicolas Malin (Jira)]

<security direct-request="false"/> does not work
------------------------------------------------

                 Key: OFBIZ-3861
                 URL: https://issues.apache.org/jira/browse/OFBIZ-3861
             Project: OFBiz
          Issue Type: Bug
          Components: framework
    Affects Versions: SVN trunk
            Reporter: Wai


specifying direct-request="false" in a request-map has no effect.  A direct request to the resource is not rejected by ofbiz


--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-3861?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Wai updated OFBIZ-3861:
-----------------------

    Attachment: RequestHandler.java.patch

patch for this issue.
/ofbiz//framework/webapp/src/org/ofbiz/webapp/control/RequestHandler.java

> <security direct-request="false"/> does not work
> ------------------------------------------------
>
>                 Key: OFBIZ-3861
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-3861
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Wai
>         Attachments: RequestHandler.java.patch
>
>
> specifying direct-request="false" in a request-map has no effect.  A direct request to the resource is not rejected by ofbiz

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-3861?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Gray reassigned OFBIZ-3861:
---------------------------------

    Assignee: Scott Gray

> <security direct-request="false"/> does not work
> ------------------------------------------------
>
>                 Key: OFBIZ-3861
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-3861
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Wai
>            Assignee: Scott Gray
>         Attachments: RequestHandler.java.patch
>
>
> specifying direct-request="false" in a request-map has no effect.  A direct request to the resource is not rejected by ofbiz

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[Nicolas Malin (Jira)]

     [ https://issues.apache.org/jira/browse/OFBIZ-3861?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Gray closed OFBIZ-3861.
-----------------------------

    Fix Version/s: Release Branch 09.04
                   Release Branch 10.04
                   SVN trunk
       Resolution: Fixed

Thanks Wai, fixed in commits:
trunk - r965163
10.04 - r965164
9.04 - r965167

> <security direct-request="false"/> does not work
> ------------------------------------------------
>
>                 Key: OFBIZ-3861
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-3861
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: SVN trunk
>            Reporter: Wai
>            Assignee: Scott Gray
>             Fix For: Release Branch 09.04, Release Branch 10.04, SVN trunk
>
>         Attachments: RequestHandler.java.patch
>
>
> specifying direct-request="false" in a request-map has no effect.  A direct request to the resource is not rejected by ofbiz

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.