Html Macros should respect authenticated user based on allowlist API

XMLWordPrintable

    • Severity 3 - Minor

      Gadgets have moved to use whitelist.isAllowed(URI, Userkey) to give more controls to admins to whether allow anonymous users or not.

      More details on the whitelist API changes can be found here:
      https://asecurityteam.atlassian.net/browse/VULN-217900

      We had to enable the old behaviour of whitelist.isAllowed(URI) temporarily as part of:
      BSP-2173 Update isAllowed method to use old behaviour
      Failing tests with new API:

        Failed HtmlIncludeFuncTest testWhitelistAllowUsingExactMatch History
       
      Failing since build #1 (First build for this plan) 8 secs  
        Failed HtmlIncludeFuncTest testWhitelistAllowUsingRegex History
       
      Failing since build #1 (First build for this plan) 8 secs  
        Failed HtmlIncludeFuncTest testWhitelistAllowUsingWildcard History
       
      Failing since build #1 (First build for this plan) 8 secs  
        Failed RssMacroWhitelistTestCase testWhitelistAllowUsingExactMatch History
       
      Failing since build #1 (First build for this plan) 9 secs  
        Failed RssMacroWhitelistTestCase testWhitelistAllowUsingRegex History
       
      Failing since build #1 (First build for this plan) 9 secs  
        Failed RssMacroWhitelistTestCase testWhitelistAllowUsingWildcard

      Logs attached!

       

              Assignee:
              Richard Lau
              Reporter:
              Ganesh Gautam
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: