Uploaded image for project: 'Magnolia'
  1. Magnolia
  2. MAGNOLIA-4449

Protected Page does not redirect to the login page

    XMLWordPrintable

Details

    • Bug
    • Resolution: Duplicate
    • Critical
    • 4.5.7
    • 4.4.6, 4.5, 4.5.7
    • security
    • None

    Description

      Anonymous role has deny access to /demo-project/members-area/protected* , this rule should be used in info.magnolia.cms.security.URISecurityFilter.isAuthorized(HttpServletRequest), but this doesn't happen due to this rule pattern doesn't match with current uri. info.magnolia.cms.core.AggregationState.getCurrentURI() has value "/members-area/protected" because info.magnolia.module.extendedtemplatingkit.filters.MultiSiteFilter removes site definition name from uri.

      Checklists

        Acceptance criteria

        Attachments

          Issue Links

            Activity

              People

                ochytil Ondrej Chytil
                cringele Christian Ringele
                Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  Checklists

                    Bug DoR
                    Task DoD