Uploaded image for project: 'SonarQube'
  1. SonarQube
  2. SONAR-5542

Force user authentication is not taking into account by Java Web Service

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 4.4
    • Fix Version/s: 4.5
    • Component/s: Web API
    • Labels:
      None

      Description

      If Force user authentication is set to true, every java web services do not take this into account.

      For instance, http://localhost:9000/api/sources/show?key=org.codehaus.sonar:sonar-server:src%2Fmain%2Fjava%2Forg%2Fsonar%2Fserver%2Ftext%2FRubyTextService.java is then available even without being loggued (if the browse permission of the project is set to Anyone).

        Attachments

          Activity

            People

            Assignee:
            julien.lancelot Julien Lancelot
            Reporter:
            julien.lancelot Julien Lancelot
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Due:
              Created:
              Updated:
              Resolved: