[Exist-commits] eXist-1.0/src/org/exist/collections/triggers Dumper.java,1.2,1.3

[Wolfgang M. M. <wol...@us...>]

Update of /cvsroot/exist/eXist-1.0/src/org/exist/collections/triggers
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv23472/src/org/exist/collections/triggers

Modified Files:
	Dumper.java 
Log Message:
Security issues fixed: resources were included in the XQuery context though the user 
had no permission to read the resource. REST-style interface did not correctly check 
permissions; /db/system/users.xml could be retrieved by ordinary users.

Index: Dumper.java
===================================================================
RCS file: /cvsroot/exist/eXist-1.0/src/org/exist/collections/triggers/Dumper.java,v
retrieving revision 1.2
retrieving revision 1.3
diff -C2 -d -r1.2 -r1.3
*** Dumper.java	2 Oct 2003 12:19:26 -0000	1.2
--- Dumper.java	1 Apr 2004 14:12:45 -0000	1.3
***************
*** 64,68 ****
  		System.out.println("collection contents:");
  		DocumentSet docs = new DocumentSet();
! 		collection.getDocuments(docs);
  		for(int i = 0; i < docs.getLength(); i++)
  			System.out.println("\t" + ((DocumentImpl)docs.item(i)).getFileName());
--- 64,68 ----
  		System.out.println("collection contents:");
  		DocumentSet docs = new DocumentSet();
! 		collection.getDocuments(broker, docs);
  		for(int i = 0; i < docs.getLength(); i++)
  			System.out.println("\t" + ((DocumentImpl)docs.item(i)).getFileName());