ConfigurationAdmin.getConfiguration(String, String) and
.createConfiguration(String) to generous
------------------------------------------------------------------------------------------------
Key: FELIX-3229
URL: https://issues.apache.org/jira/browse/FELIX-3229
Project: Felix
Issue Type: Bug
Components: Configuration Admin, Specification compliance
Affects Versions: configadmin-1.2.8
Reporter: Felix Meschberger
Assignee: Felix Meschberger
Fix For: configadmin-1.4.0
Similar to FELIX-3228, the ConfigurationAdmin.getConfiguration and
createConfiguration methods with the location parameter do not properly check
the null location properly.
R 4.3 Configuration Admin (v1.4) spec states:
• createFactoryConfiguration(String,String)
• ConfigurationPermission[location,CONFIGURE] - if location is not null
• ConfigurationPermission["*",CONFIGURE] - if location is null
• getConfiguration(String,String)
• ConfigurationPermission[*,CONFIGURE] - if location is null or if the
returned configuration c already exists and c.location is null
• ConfigurationPermission[location,CONFIGURE] - if location is not null
• ConfigurationPermission[c.location,CONFIGURE] - if the returned
configuration c already exists and c.location is not null
Particularly the CP("*", CONFIGURE) case is not properly checked.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira