Uploaded image for project: 'PUBLIC - Liferay Portal Enterprise Edition'
  1. PUBLIC - Liferay Portal Enterprise Edition
  2. LPE-5525

Improved security in file uploader with tighter session to Flash binding

    Details

      Description

      In order to improved security in the Flash multiple file uploader, an expiring ticket service has been added to provide tighter session to Flash binding. This ensures that the user in the session is the user using the Flash uploader.

      API CHANGES:

      Class: com.liferay.portal.service.TicketLocalService

      Method: addTicket(long companyId, String className, long classPK, Date expirationDate, ServiceContext serviceContext)
      Status: Deleted
      New method: addTicket(long companyId, String className, long classPK, int type, String extraInfo, Date expirationDate, ServiceContext serviceContext)

      Class: com.liferay.portal.service.TicketLocalServiceUtil

      Method: addTicket(long companyId, String className, long classPK, Date expirationDate, ServiceContext serviceContext)
      Status: Deleted
      New method: addTicket(long companyId, String className, long classPK, int type, String extraInfo, Date expirationDate, ServiceContext serviceContext)

      Class: com.liferay.portal.service.TicketLocalServiceWrapper

      Method: addTicket(long companyId, String className, long classPK, Date expirationDate, ServiceContext serviceContext)
      Status: Deleted
      New method: addTicket(long companyId, String className, long classPK, int type, String extraInfo, Date expirationDate, ServiceContext serviceContext)

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              samuel.kong Samuel Kong
              Reporter:
              samuel.kong Samuel Kong
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Packages

                  Version Package
                  6.0 EE SP2 (6.0.12)