ConfigurationAdmin.getConfiguration(String, String) and 
.createConfiguration(String) to generous
------------------------------------------------------------------------------------------------

                 Key: FELIX-3229
                 URL: https://issues.apache.org/jira/browse/FELIX-3229
             Project: Felix
          Issue Type: Bug
          Components: Configuration Admin, Specification compliance
    Affects Versions:  configadmin-1.2.8
            Reporter: Felix Meschberger
            Assignee: Felix Meschberger
             Fix For: configadmin-1.4.0


Similar to FELIX-3228, the ConfigurationAdmin.getConfiguration and 
createConfiguration methods with the location parameter do not properly check 
the null location properly.

R 4.3 Configuration Admin (v1.4) spec states:

• createFactoryConfiguration(String,String)
    • ConfigurationPermission[location,CONFIGURE] - if location is not null
    • ConfigurationPermission["*",CONFIGURE] - if location is null
• getConfiguration(String,String)
    • ConfigurationPermission[*,CONFIGURE] - if location is null or if the 
returned configuration c already exists and c.location is null
    • ConfigurationPermission[location,CONFIGURE] - if location is not null
    • ConfigurationPermission[c.location,CONFIGURE] - if the returned 
configuration c already exists and c.location is not null

Particularly the CP("*", CONFIGURE) case is not properly checked.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira


Reply via email to