Acegi Security 1.0.5 Released

[Luke Taylor]

Release 1.0.5 is now available from Sourceforge.

http://sourceforge.net/project/showf...roup_id=104215

This is mainly a maintenance release - the changelog can be viewed here:

http://sourceforge.net/project/shown...roup_id=104215

It is also the first release to be built using maven 2. Maven 1 files have been removed.

[obione]

Hey! Great job, guys!

Thank you very much for all your hard work and for rolling out another great release of this very useful piece of software!

Best regards.

[Aramir]

Got a NullPointerException with 1.0.5 while trying to access secured content with a user which does not have a neccessary role in the Authorities set:

java.lang.NullPointerException
  at org.acegisecurity.ui.ExceptionTranslationFilter.handleException(ExceptionTranslationFilter.java:229)
  at org.acegisecurity.ui.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:176)
  at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:275)
  at org.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter(AnonymousProcessingFilter.java:125)
  at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:275)
  at org.acegisecurity.ui.rememberme.RememberMeProcessingFilter.doFilter(RememberMeProcessingFilter.java:142)
  at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:275)
  at org.acegisecurity.ui.basicauth.BasicProcessingFilter.doFilter(BasicProcessingFilter.java:173)
  at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:275)
  at org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:271)
  at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:275)
  at org.acegisecurity.ui.logout.LogoutFilter.doFilter(LogoutFilter.java:110)
  at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:275)
  at org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(HttpSessionContextIntegrationFilter.java:249)
  at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:275)
  at org.acegisecurity.util.FilterChainProxy.doFilter(FilterChainProxy.java:149)
  at org.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:98)
  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
...

Caused by accessDeniedHandler being null. (For some reason default AccessDeniedHandlerImpl is not being assigned).

Same codebase works fine with 1.0.4.
JIRA issue created. I am reverting back to 1.0.4 for now.

[thundercat01]

I also received below exception message when I was trying to upgrade from acegi-security-1.0.4.jar to acegi-security-1.0.5.jar. The application works perfectly when i use acegi-security-1.0.4.jar.

Solution: I found a solution to overcome this problem by inserting bellow codes to the "exceptionTranslationFilter" bean in configuration file.

<property name="accessDeniedHandler">
<bean class="org.acegisecurity.ui.AccessDeniedHandlerImp l" lazy-init="default" autowire="default" dependency-check="default">
<property name="errorPage" value="/accessDenied.jsp" />
</bean>
</property>



Stack Trace:
org.acegisecurity.ui.ExceptionTranslationFilter.ha ndleException(ExceptionTranslationFilter.java:229)
org.acegisecurity.ui.ExceptionTranslationFilter.do Filter(ExceptionTranslationFilter.java:176)
org.acegisecurity.util.FilterChainProxy$VirtualFil terChain.doFilter(FilterChainProxy.java:275)
org.acegisecurity.providers.anonymous.AnonymousPro cessingFilter.doFilter(AnonymousProcessingFilter.j ava:125)
org.acegisecurity.util.FilterChainProxy$VirtualFil terChain.doFilter(FilterChainProxy.java:275)
org.acegisecurity.ui.AbstractProcessingFilter.doFi lter(AbstractProcessingFilter.java:271)
org.acegisecurity.util.FilterChainProxy$VirtualFil terChain.doFilter(FilterChainProxy.java:275)
org.acegisecurity.context.HttpSessionContextIntegr ationFilter.doFilter(HttpSessionContextIntegration Filter.java:249)
org.acegisecurity.util.FilterChainProxy$VirtualFil terChain.doFilter(FilterChainProxy.java:275)
org.acegisecurity.securechannel.ChannelProcessingF ilter.doFilter(ChannelProcessingFilter.java:138)
org.acegisecurity.util.FilterChainProxy$VirtualFil terChain.doFilter(FilterChainProxy.java:275)
org.acegisecurity.util.FilterChainProxy.doFilter(F ilterChainProxy.java:149)
org.acegisecurity.util.FilterToBeanProxy.doFilter( FilterToBeanProxy.java:98)
org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java:202)
org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:173)
org.apache.catalina.core.StandardWrapperValve.invo ke(StandardWrapperValve.java:213)
org.apache.catalina.core.StandardContextValve.invo ke(StandardContextValve.java:178)
org.apache.catalina.core.StandardHostValve.invoke( StandardHostValve.java:126)
org.apache.catalina.valves.ErrorReportValve.invoke (ErrorReportValve.java:105)
org.apache.catalina.core.StandardEngineValve.invok e(StandardEngineValve.java:107)
org.apache.catalina.connector.CoyoteAdapter.servic e(CoyoteAdapter.java:148)
org.apache.coyote.http11.Http11Processor.process(H ttp11Processor.java:868)
org.apache.coyote.http11.Http11BaseProtocol$Http11 ConnectionHandler.processConnection(Http11BaseProt ocol.java:663)
org.apache.tomcat.util.net.PoolTcpEndpoint.process Socket(PoolTcpEndpoint.java:527)
org.apache.tomcat.util.net.LeaderFollowerWorkerThr ead.runIt(LeaderFollowerWorkerThread.java:80)
org.apache.tomcat.util.threads.ThreadPool$ControlR unnable.run(ThreadPool.java:684)
java.lang.Thread.run(Thread.java:619)