Nemcio/SCM-Manager
1
0
Fork 0
mirror of https://github.com/scm-manager/scm-manager.git synced 2025-11-15 17:56:17 +01:00
Code Issues Packages Projects Releases Activity

do not swallow the ScmSecurityException in PermissionFilter

Browse Source
This commit is contained in:
Sebastian Sdorra
2016-05-25 10:03:04 +02:00
parent 56891afae2
commit 71b742388c
1 changed files with 9 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
scm-core/src/main/java/sonia/scm/web/filter/PermissionFilter.java
View File

@@ -161,33 +161,24 @@ public abstract class PermissionFilter extends HttpFilter
if (hasPermission(repository, writeRequest))
{
if (logger.isTraceEnabled())
{
logger.trace("{} access to repository {} for user {} granted",
getActionAsString(writeRequest), repository.getName(),
getUserName(subject));
}
logger.trace("{} access to repository {} for user {} granted",
getActionAsString(writeRequest), repository.getName(),
getUserName(subject));
chain.doFilter(request, response);
}
else
{
if (logger.isInfoEnabled())
{
logger.info("{} access to repository {} for user {} denied",
getActionAsString(writeRequest), repository.getName(),
getUserName(subject));
}
logger.info("{} access to repository {} for user {} denied",
getActionAsString(writeRequest), repository.getName(),
getUserName(subject));
sendAccessDenied(request, response, subject);
}
}
else
{
if (logger.isDebugEnabled())
{
logger.debug("repository not found");
}
logger.debug("repository not found");
response.sendError(HttpServletResponse.SC_NOT_FOUND);
}
@@ -210,12 +201,7 @@ public abstract class PermissionFilter extends HttpFilter
}
catch (ScmSecurityException ex)
{
if (logger.isWarnEnabled())
{
logger.warn("user {} has not enough permissions",
subject.getPrincipal());
}
logger.warn("user " + subject.getPrincipal() + " has not enough permissions", ex);
sendAccessDenied(request, response, subject);
}