Apache/struts
1
0
Fork 0
mirror of https://github.com/apache/struts.git synced 2026-08-11 01:27:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

WW-4523 - Add more log statements to RolesInterceptor

Browse Source
This commit is contained in:
Johannes Geppert
2015-07-12 18:14:37 +02:00
parent 4969750f37 3c9ff04bdb
commit d8c4062519
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
core/src/main/java/org/apache/struts2/interceptor/RolesInterceptor.java
+5
View File
@@ -120,8 +120,10 @@ public class RolesInterceptor extends AbstractInterceptor {
throw new IllegalArgumentException("RolesInterceptor is misconfigured, check logs for erroneous configuration!");
}
if (!isAllowed(request, invocation.getAction())) {
LOG.debug("Request is NOT allowed. Rejecting.");
return handleRejection(invocation, response);
} else {
LOG.debug("Request is allowed. Invoking.");
return invocation.invoke();
}
}
@@ -148,16 +150,19 @@ public class RolesInterceptor extends AbstractInterceptor {
protected boolean isAllowed(HttpServletRequest request, Object action) {
for (String role : disallowedRoles) {
if (request.isUserInRole(role)) {
LOG.debug("User role '{}' is in the disallowedRoles list.", role);
return false;
}
}
if (allowedRoles.isEmpty()){
LOG.debug("The allowedRoles list is empty.");
return true;
}
for (String role : allowedRoles) {
if (request.isUserInRole(role)) {
LOG.debug("User role '{}' is in the allowedRoles list.", role);
return true;
}
}