Author: ghuber
Date: Thu Jan 16 07:59:48 2014
New Revision: 1558710
URL: http://svn.apache.org/r1558710
Log:
Add some info on how servlet is protected.
Modified:
roller/trunk/app/src/main/java/org/apache/roller/weblogger/ui/struts2/ajax/UserDataServlet.java
Modified:
roller/trunk/app/src/main/java/org/apache/roller/weblogger/ui/struts2/ajax/UserDataServlet.java
URL:
http://svn.apache.org/viewvc/roller/trunk/app/src/main/java/org/apache/roller/weblogger/ui/struts2/ajax/UserDataServlet.java?rev=1558710&r1=1558709&r2=1558710&view=diff
==============================================================================
---
roller/trunk/app/src/main/java/org/apache/roller/weblogger/ui/struts2/ajax/UserDataServlet.java
(original)
+++
roller/trunk/app/src/main/java/org/apache/roller/weblogger/ui/struts2/ajax/UserDataServlet.java
Thu Jan 16 07:59:48 2014
@@ -46,6 +46,11 @@ import org.apache.roller.weblogger.ui.re
* username1, emailaddress1 <br/>
* username2, emailaddress2 <br/>
* usernameN, emailaddressN <br/>
+ *
+ * web.xml
+ * <url-pattern>/roller-ui/admin/userdata/*</url-pattern>
+ * security.xml
+ * <intercept-url pattern="/roller-ui/admin/**" access="admin"/>
*/
public class UserDataServlet extends HttpServlet {
@@ -55,6 +60,7 @@ public class UserDataServlet extends Htt
public void doGet(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
+ // This user check can be removed as we protected by spring (see
above).
WeblogRequest weblogRequest = null;
try {
weblogRequest = new WeblogRequest(request);