[jira] [Created] (QPID-3965) Case sensitivity issue with java broker ACL

Alex Rudyy created QPID-3965:
--------------------------------

             Summary: Case sensitivity issue with java broker ACL
                 Key: QPID-3965
                 URL: https://issues.apache.org/jira/browse/QPID-3965
             Project: Qpid
          Issue Type: Bug
          Components: Java Broker
    Affects Versions: 0.17
            Reporter: Alex Rudyy


When user name in a group definition contains an upper case the ACL is not able to authorize this user properly.

Example ACL
GROUP test F1, f2
ACL ALLOW-LOG test ALL METHOD
ACL DENY-LOG ALL ALL METHOD

For the example above for user F1 result "Denied" is returned on trying to access any method whiles for user f2 it is allowed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

     [ https://issues.apache.org/jira/browse/QPID-3965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alex Rudyy reassigned QPID-3965:
--------------------------------

    Assignee: Alex Rudyy
   

> Case sensitivity issue with java broker ACL
> -------------------------------------------
>
>                 Key: QPID-3965
>                 URL: https://issues.apache.org/jira/browse/QPID-3965
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: 0.17
>            Reporter: Alex Rudyy
>            Assignee: Alex Rudyy
>         Attachments: 0001-QPID-3965-Fix-issue-with-converting-ACL-content-to-l.patch
>
>
> When user name in a group definition contains an upper case the ACL is not able to authorize this user properly.
> Example ACL
> GROUP test F1, f2
> ACL ALLOW-LOG test ALL METHOD
> ACL DENY-LOG ALL ALL METHOD
> For the example above for user F1 result "Denied" is returned on trying to access any method whiles for user f2 it is allowed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

     [ https://issues.apache.org/jira/browse/QPID-3965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alex Rudyy updated QPID-3965:
-----------------------------

    Attachment: 0001-QPID-3965-Fix-issue-with-converting-ACL-content-to-l.patch

Attached a patch fixing the issue
               

> Case sensitivity issue with java broker ACL
> -------------------------------------------
>
>                 Key: QPID-3965
>                 URL: https://issues.apache.org/jira/browse/QPID-3965
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: 0.17
>            Reporter: Alex Rudyy
>            Assignee: Alex Rudyy
>         Attachments: 0001-QPID-3965-Fix-issue-with-converting-ACL-content-to-l.patch
>
>
> When user name in a group definition contains an upper case the ACL is not able to authorize this user properly.
> Example ACL
> GROUP test F1, f2
> ACL ALLOW-LOG test ALL METHOD
> ACL DENY-LOG ALL ALL METHOD
> For the example above for user F1 result "Denied" is returned on trying to access any method whiles for user f2 it is allowed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

     [ https://issues.apache.org/jira/browse/QPID-3965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alex Rudyy updated QPID-3965:
-----------------------------

    Status: Ready To Review  (was: In Progress)
   

> Case sensitivity issue with java broker ACL
> -------------------------------------------
>
>                 Key: QPID-3965
>                 URL: https://issues.apache.org/jira/browse/QPID-3965
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: 0.17
>            Reporter: Alex Rudyy
>            Assignee: Alex Rudyy
>         Attachments: 0001-QPID-3965-Fix-issue-with-converting-ACL-content-to-l.patch
>
>
> When user name in a group definition contains an upper case the ACL is not able to authorize this user properly.
> Example ACL
> GROUP test F1, f2
> ACL ALLOW-LOG test ALL METHOD
> ACL DENY-LOG ALL ALL METHOD
> For the example above for user F1 result "Denied" is returned on trying to access any method whiles for user f2 it is allowed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

     [ https://issues.apache.org/jira/browse/QPID-3965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alex Rudyy reassigned QPID-3965:
--------------------------------

    Assignee: Robbie Gemmell  (was: Alex Rudyy)

Roobie,

Do you mind to review and apply the patch attached?
               

> Case sensitivity issue with java broker ACL
> -------------------------------------------
>
>                 Key: QPID-3965
>                 URL: https://issues.apache.org/jira/browse/QPID-3965
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: 0.17
>            Reporter: Alex Rudyy
>            Assignee: Robbie Gemmell
>             Fix For: 0.17
>
>         Attachments: 0001-QPID-3965-Fix-issue-with-converting-ACL-content-to-l.patch
>
>
> When user name in a group definition contains an upper case the ACL is not able to authorize this user properly.
> Example ACL
> GROUP test F1, f2
> ACL ALLOW-LOG test ALL METHOD
> ACL DENY-LOG ALL ALL METHOD
> For the example above for user F1 result "Denied" is returned on trying to access any method whiles for user f2 it is allowed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

     [ https://issues.apache.org/jira/browse/QPID-3965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alex Rudyy updated QPID-3965:
-----------------------------

    Fix Version/s: 0.17
   

> Case sensitivity issue with java broker ACL
> -------------------------------------------
>
>                 Key: QPID-3965
>                 URL: https://issues.apache.org/jira/browse/QPID-3965
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: 0.17
>            Reporter: Alex Rudyy
>            Assignee: Robbie Gemmell
>             Fix For: 0.17
>
>         Attachments: 0001-QPID-3965-Fix-issue-with-converting-ACL-content-to-l.patch
>
>
> When user name in a group definition contains an upper case the ACL is not able to authorize this user properly.
> Example ACL
> GROUP test F1, f2
> ACL ALLOW-LOG test ALL METHOD
> ACL DENY-LOG ALL ALL METHOD
> For the example above for user F1 result "Denied" is returned on trying to access any method whiles for user f2 it is allowed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

     [ https://issues.apache.org/jira/browse/QPID-3965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robbie Gemmell reassigned QPID-3965:
------------------------------------

    Assignee: Keith Wall  (was: Robbie Gemmell)

Passing along to Keith since he has looked at the issue already.
               

> Case sensitivity issue with java broker ACL
> -------------------------------------------
>
>                 Key: QPID-3965
>                 URL: https://issues.apache.org/jira/browse/QPID-3965
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: 0.17
>            Reporter: Alex Rudyy
>            Assignee: Keith Wall
>             Fix For: 0.17
>
>         Attachments: 0001-QPID-3965-Fix-issue-with-converting-ACL-content-to-l.patch
>
>
> When user name in a group definition contains an upper case the ACL is not able to authorize this user properly.
> Example ACL
> GROUP test F1, f2
> ACL ALLOW-LOG test ALL METHOD
> ACL DENY-LOG ALL ALL METHOD
> For the example above for user F1 result "Denied" is returned on trying to access any method whiles for user f2 it is allowed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

    [ https://issues.apache.org/jira/browse/QPID-3965?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13263555#comment-13263555 ]

Keith Wall commented on QPID-3965:
----------------------------------

Reviewed, no comments.
               

> Case sensitivity issue with java broker ACL
> -------------------------------------------
>
>                 Key: QPID-3965
>                 URL: https://issues.apache.org/jira/browse/QPID-3965
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: 0.10, 0.12, 0.14, 0.16
>            Reporter: Alex Rudyy
>            Assignee: Keith Wall
>             Fix For: 0.17
>
>         Attachments: 0001-QPID-3965-Fix-issue-with-converting-ACL-content-to-l.patch
>
>
> When user name in a group definition contains an upper case the ACL is not able to authorize this user properly.
> Example ACL
> GROUP test F1, f2
> ACL ALLOW-LOG test ALL METHOD
> ACL DENY-LOG ALL ALL METHOD
> For the example above for user F1 result "Denied" is returned on trying to access any method whiles for user f2 it is allowed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

     [ https://issues.apache.org/jira/browse/QPID-3965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Keith Wall updated QPID-3965:
-----------------------------

    Affects Version/s:     (was: 0.17)
                       0.16
                       0.10
                       0.12
                       0.14
   

> Case sensitivity issue with java broker ACL
> -------------------------------------------
>
>                 Key: QPID-3965
>                 URL: https://issues.apache.org/jira/browse/QPID-3965
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: 0.10, 0.12, 0.14, 0.16
>            Reporter: Alex Rudyy
>            Assignee: Keith Wall
>             Fix For: 0.17
>
>         Attachments: 0001-QPID-3965-Fix-issue-with-converting-ACL-content-to-l.patch
>
>
> When user name in a group definition contains an upper case the ACL is not able to authorize this user properly.
> Example ACL
> GROUP test F1, f2
> ACL ALLOW-LOG test ALL METHOD
> ACL DENY-LOG ALL ALL METHOD
> For the example above for user F1 result "Denied" is returned on trying to access any method whiles for user f2 it is allowed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

     [ https://issues.apache.org/jira/browse/QPID-3965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Keith Wall resolved QPID-3965.
------------------------------

    Resolution: Fixed
   

> Case sensitivity issue with java broker ACL
> -------------------------------------------
>
>                 Key: QPID-3965
>                 URL: https://issues.apache.org/jira/browse/QPID-3965
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: 0.10, 0.12, 0.14, 0.16
>            Reporter: Alex Rudyy
>            Assignee: Keith Wall
>             Fix For: 0.17
>
>         Attachments: 0001-QPID-3965-Fix-issue-with-converting-ACL-content-to-l.patch
>
>
> When user name in a group definition contains an upper case the ACL is not able to authorize this user properly.
> Example ACL
> GROUP test F1, f2
> ACL ALLOW-LOG test ALL METHOD
> ACL DENY-LOG ALL ALL METHOD
> For the example above for user F1 result "Denied" is returned on trying to access any method whiles for user f2 it is allowed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]