Details
-
Bug
-
Status: Closed
-
Blocker
-
Resolution: Fixed
-
Auth Core 1.3.18
-
None
Description
Issue can be reproduced with the following steps:
Create node "/page"
Create sibling node "/page1"
Define a protection handler for node: "/page"
Expected:
"/page" has AuthenticationInfo
"/page1" does not have AuthenticationInfo (has anonymous)
Actual: "/page" & "page1" are both having AuthenticationInfo
Reason: SlingAuthenticator.java line 726: if (path.startsWith(holder.path)) Warning: The same check is used in 4 more places in code with similar behaviour.
Attachments
Attachments
Issue Links
- is duplicated by
-
SLING-6563 Authentication Requirement: Siblings of Nodes with AuthRequired starting with same name result in 302
- Closed
- is related to
-
SLING-4701 SlingAuthenticator.isAnonAllowed matches for all paths starting with the same characters
- Resolved
- links to