Author: ghuber
Date: Thu Jan 16 07:59:48 2014
New Revision: 1558710

URL: http://svn.apache.org/r1558710
Log:
Add some info on how servlet is protected.

Modified:
    
roller/trunk/app/src/main/java/org/apache/roller/weblogger/ui/struts2/ajax/UserDataServlet.java

Modified: 
roller/trunk/app/src/main/java/org/apache/roller/weblogger/ui/struts2/ajax/UserDataServlet.java
URL: 
http://svn.apache.org/viewvc/roller/trunk/app/src/main/java/org/apache/roller/weblogger/ui/struts2/ajax/UserDataServlet.java?rev=1558710&r1=1558709&r2=1558710&view=diff
==============================================================================
--- 
roller/trunk/app/src/main/java/org/apache/roller/weblogger/ui/struts2/ajax/UserDataServlet.java
 (original)
+++ 
roller/trunk/app/src/main/java/org/apache/roller/weblogger/ui/struts2/ajax/UserDataServlet.java
 Thu Jan 16 07:59:48 2014
@@ -46,6 +46,11 @@ import org.apache.roller.weblogger.ui.re
  * username1, emailaddress1 <br/>
  * username2, emailaddress2 <br/>
  * usernameN, emailaddressN <br/>
+ * 
+ * web.xml
+ * <url-pattern>/roller-ui/admin/userdata/*</url-pattern>
+ * security.xml
+ * <intercept-url pattern="/roller-ui/admin/**" access="admin"/>
  */
 public class UserDataServlet extends HttpServlet {
 
@@ -55,6 +60,7 @@ public class UserDataServlet extends Htt
     public void doGet(HttpServletRequest request, HttpServletResponse response)
             throws ServletException, IOException {
 
+        // This user check can be removed as we protected by spring (see 
above).
         WeblogRequest weblogRequest = null;
         try {
             weblogRequest = new WeblogRequest(request);


Reply via email to