From: Sanjay Dalal <sanjay.dalal@berkeley.edu>
Date: Wed, 31 Mar 2010 22:43:35 +0000 (+0000)
Subject: CSPACE-1050 disabled construction of uriresource as HTTP HEAD and OPTIONS are not... 
X-Git-Url: https://git.aero2k.de/?a=commitdiff_plain;h=7c90fda9478d4de824e7baf487abe697fe6df73f;p=tmp%2Fjakarta-migration.git

CSPACE-1050 disabled construction of uriresource as HTTP HEAD and OPTIONS are not yet mapped to CSpaceActions that could be permitted
mvn tests at services level including client tests

M    common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java
---

diff --git a/services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java b/services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java
index 2cd6428e3..8ab593d8d 100644
--- a/services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java
+++ b/services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java
@@ -85,7 +85,7 @@ public class SecurityInterceptor implements PreProcessInterceptor {
             logger.debug("received " + httpMethod + " on " + uriPath);
         }
         AuthZ authZ = AuthZ.get();
-        CSpaceResource res = new URIResourceImpl(uriPath, httpMethod);
+//        CSpaceResource res = new URIResourceImpl(uriPath, httpMethod);
 //        if (!authZ.isAccessAllowed(res)) {
 //            logger.error("Access to " + res.getId() + " is NOT allowed to " +
 //                    " user=" + AuthN.get().getUserId());
@@ -93,10 +93,10 @@ public class SecurityInterceptor implements PreProcessInterceptor {
 //                    Response.Status.FORBIDDEN).entity(uriPath + " " + httpMethod).type("text/plain").build();
 //            throw new WebApplicationException(response);
 //        }
-        if(logger.isDebugEnabled()) {
-            logger.debug("Access to " + res.getId() + " is allowed to " +
-                    " user=" + AuthN.get().getUserId());
-        }
+//        if(logger.isDebugEnabled()) {
+//            logger.debug("Access to " + res.getId() + " is allowed to " +
+//                    " user=" + AuthN.get().getUserId());
+//        }
         return null;
     }
 }