[ https://issues.apache.org/jira/browse/SYNCOPE-418?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13773046#comment-13773046 ]
Hudson commented on SYNCOPE-418: -------------------------------- SUCCESS: Integrated in Syncope-trunk #452 (See [https://builds.apache.org/job/Syncope-trunk/452/]) [SYNCOPE-418] Merge from 1_1_X (ilgrosso: rev 1525004) * /syncope/trunk * /syncope/trunk/common/src/main/java/org/apache/syncope/common/types/EntityViolationType.java * /syncope/trunk/common/src/main/java/org/apache/syncope/common/types/SyncopeClientExceptionType.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/beans/AbstractDerSchema.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/beans/AbstractSchema.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/beans/AbstractVirSchema.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/beans/SyncopeConf.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/beans/user/UDerSchema.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/beans/user/USchema.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/beans/user/UVirSchema.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/attrvalue/EmailAddressValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/AbstractValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/AttrValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/AttrValueValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/ConnInstanceValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/ExternalResourceValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/NotificationValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/PolicyValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/PropagationTaskValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/ReportValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/SchedTaskValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/SchemaNameCheck.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/SchemaNameValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/SchemaValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/SyncTaskValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/SyncopeConfCheck.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/SyncopeConfValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/SyncopeRoleValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/SyncopeUserValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/USchemaCheck.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/validation/entity/USchemaValidator.java * /syncope/trunk/core/src/main/java/org/apache/syncope/core/rest/data/SchemaDataBinder.java * /syncope/trunk/core/src/test/java/org/apache/syncope/core/persistence/dao/AttrTest.java * /syncope/trunk/core/src/test/java/org/apache/syncope/core/persistence/dao/ConfTest.java * /syncope/trunk/core/src/test/java/org/apache/syncope/core/persistence/dao/DerSchemaTest.java * /syncope/trunk/core/src/test/java/org/apache/syncope/core/persistence/dao/ResourceTest.java * /syncope/trunk/core/src/test/java/org/apache/syncope/core/persistence/dao/SchemaTest.java * /syncope/trunk/core/src/test/java/org/apache/syncope/core/persistence/dao/VirSchemaTest.java * /syncope/trunk/core/src/test/java/org/apache/syncope/core/rest/ConfigurationTestITCase.java * /syncope/trunk/core/src/test/java/org/apache/syncope/core/rest/DerivedSchemaTestITCase.java * /syncope/trunk/core/src/test/java/org/apache/syncope/core/rest/ResourceTestITCase.java * /syncope/trunk/core/src/test/java/org/apache/syncope/core/rest/SchemaTestITCase.java * /syncope/trunk/core/src/test/java/org/apache/syncope/core/rest/VirtualSchemaTestITCase.java > Special chars break REST URLs > ----------------------------- > > Key: SYNCOPE-418 > URL: https://issues.apache.org/jira/browse/SYNCOPE-418 > Project: Syncope > Issue Type: Bug > Components: core > Affects Versions: 1.1.3 > Reporter: Francesco Chicchiriccò > Assignee: Francesco Chicchiriccò > Fix For: 1.1.4, 1.2.0 > > > Some entities have String keys that are currently accepted without any > specific bound (schema, resources, config parameters). > When, for example, a value like as an URL is provided, nothing special > happens during creation (because such value is embedded into a transfer > object); however, any subsequent read or delete, which would require passing > the entity key as part of the REST URL, will fail either with Spring MVC and > CXF. > For example, as reported in mailing list [1], a user schema with name > 'http://schemas.examples.org/security/authorization/organizationUnit' can be > created but will then be impossible to read or even delete since the REST URL > would be something like as > http://localhost:9080syncope/rest/schema/USER/read/http://schemas.examples.org/security/authorization/organizationUnit > After some search, it seems that it is neither Spring MVC nor CXF problem, > but instead the JEE container (like as Tomcat, for example) that needs some > special configuration for handling such URLs (see CXF-4207 for more details). > The most logical and straightforward solution seems to be just setting some > limits for the characters admitted; at a first glance, alphanumeric plus some > special characters (space, _, -, @, .) should be fine. > [1] > http://syncope-user.1051894.n5.nabble.com/Remove-attribute-in-user-schema-td5707312.html -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira