java - Page not found 404 on unauthorized URL when page not exists -

-

i have following setup of spring security default deny (see example below). don't want change default deny because it's defensive way of security configuration , it's considered practice. if user want access page doesn't exist gets 403 because default deny strategy. want result 404 when page not exists , 403 when user have restricted access. there way configure spring security behavior?

example : 

    <intercept-url pattern="/posts/remove" access="hasrole('admin')" />     <intercept-url pattern="/posts/add" access="hasrole('editor')" />     <intercept-url pattern="/posts" access="permitall" />     <intercept-url pattern="/" access="permitall" />      <!-- default access denied -->     <intercept-url pattern="/**" access="denyall" /> </http>

when user requests /something-that-not-exists should 404 (not 403). when editor user requests /posts/remove should 403.

i'm not sure if such configuration possible, security filters intercept , process request @ earlier stage before url mapping logic of webapp chance determine if there resource respond particular request.
if security filter decides deny access matching request url, never turn out if there page behind url @ all.

edit (response michal's comment):

since mapping of urls resources/handlers pretty arbitrary in every application, no framework possibly provide algorithm applicable every webapp , determine outcome of mapping process in advance.

if can implement such logic your webapp (e.g. knowing entire url space), create filter suggested. if happen use spring mvc, calling gethandler() on every handlermapping deployed in application implementing such filter.

anyway, guess providing kind of facility cannot in scope security library meant independent , capable of working wide range of different web frameworks.


Comments

Post a Comment

Popular posts from this blog

Perl - how to grep a block of text from a file -

-
it can in xml or text format. how in general grep block of text in perl? <track type="ws"> <range> <rangestart>0</rangestart> <rangeend>146.912</rangeend> <locationindex>0</locationindex> <propertyindex>0</propertyindex> </range> </track> <track type="ps" id="1"> <range> <rangestart>0</rangestart> <rangeend>146.912</rangeend> <locationindex>1</locationindex> <propertyindex>1</propertyindex> </range> </track> i want grep type="ps" , till </range> . one solution open file, read line line , match block. open(fh, "file.txt"); foreach $line (<fh>) { if ($line =~ m/type="cc"(.*?)<\/range>/) { print $1; } } but there more optimal solution without reading file line l
Read more

delphi - How to remove all the grips on a coolbar if I have several coolbands? -

-
Image
if set mycoolbar.fixedorder true,only grip on first band hidden. well,if use delphi 7 create vcl forms application,then put coolbar on , create 3 coolbans hold other controls,only grip , top coolbands can hidden setting mycoolbar.fixedorder:=true. i've uploaded picture make things clear. you got fixedorder property wrong. fixed property not allow bands rearranged if set true . setting property of coolbar true keep user changing bands order @ runtime, user can still move , resize bands. can give advice can do, actual solution problem, well, have wait answer. my advice use 3 coolbars in row , setting "fixedorder" property true , bandborderstyle bsnone . way grip hidden on of them. about property, it's not bug of ide, actual preference of property.
Read more

javascript - Animating array of divs; only the final element is modified -

-
this baffling me @ moment. i'm experienced programmer looking throw bit of surprise fiancee on countdown page our wedding. desired effect simulated confetti falling behind main page. setup follows: i have array of divs in javascript. each div absolutely positioned on page. have interval set updates every 50 or milliseconds. on each tick, run loop on array of divs, , calculations , update positions. problem problem having, however, though can see divs created, stored array, , modified (in case, each has slight randomized rotation) during initialization phase, once tick update position starts, div stored in whatever last slot of array gets position updated. tried hard-coding each div index testing purposes, strictly last element update position. upon printing current "left" , "top" style values each div before , after calculations shows value has been changed, no visible change noticeable. here's basic code: javascript var container;
Read more