From 35250c48e3d85280681f8d16feda22578936f24b Mon Sep 17 00:00:00 2001 From: Vishal Puri Date: Wed, 25 Apr 2007 23:04:24 +0000 Subject: [PATCH] SEC-376: Moved SwitchUserProcessingFilter to AFTER the FilterSecurityInterceptor in acegi.xml --- doc/docbook/acegi.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/docbook/acegi.xml b/doc/docbook/acegi.xml index dece544dbc..8b05b282ee 100644 --- a/doc/docbook/acegi.xml +++ b/doc/docbook/acegi.xml @@ -1444,7 +1444,7 @@ if (obj instanceof UserDetails) { <value> CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON PATTERN_TYPE_APACHE_ANT - /**=httpSessionContextIntegrationFilter,logoutFilter,authenticationProcessingFilter,basicProcessingFilter,securityContextHolderAwareRequestFilter,rememberMeProcessingFilter,anonymousProcessingFilter,switchUserProcessingFilter,exceptionTranslationFilter,filterInvocationInterceptor + /**=httpSessionContextIntegrationFilter,logoutFilter,authenticationProcessingFilter,basicProcessingFilter,securityContextHolderAwareRequestFilter,rememberMeProcessingFilter,anonymousProcessingFilter,exceptionTranslationFilter,filterInvocationInterceptor,switchUserProcessingFilter </value> </property> </bean>