[Yanel-dev] Yarep Security

[basZero]

Hi,

I noticed that running Yanel on Mac OSX can cause some issues, as Mac OSX
write its index files to all directories (".DS_Store").

Most often it does not impact Yanel, but this one is quite nasty and I added
a TODO comment into the appropriate place where the file ending should be
checked.

Index: org/wyona/security/impl/yarep/YarepUserManager.java
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
--- org/wyona/security/impl/yarep/YarepUserManager.java (revision 53980)
+++ org/wyona/security/impl/yarep/YarepUserManager.java (working copy)
@@ -75,6 +75,7 @@
             for (int i =3D 0; i < userNodes.length; i++) {
                 if (userNodes[i].isResource()) {
                     try {
+                        // TODO: Only process files ending with ".xml" !
Otherwise, on MacOSX you also parse the ".DS_Store" file!
                         Configuration config =3D
configBuilder.build(userNodes[i].getInputStream());
                         // also support identity for backwards
compatibility
                         if (config.getName().equals(YarepUser.USER) ||
config.getName().equals("identity")) {


Cheers
B
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.wyona.org/pipermail/yanel-development/attachments/2010101=
9/c3cae8a0/attachment.htm