DENY Permission not working for some of the filters in dispatcher.any file | Community
Skip to main content
ShyamSundar
Level 2
May 7, 2019 10:51 AM UTC
Solved

DENY Permission not working for some of the filters in dispatcher.any file

I have a list of application urls/filters to provide the deny access in dispatcher.any file.

  1. https://dev62.adobecqms.net/.json
  2. https://dev62.adobecqms.net/crx/de/index.jsp;%0aa.css

Below are the ways, I have set the rule in my dispatcher.any file its not working as expected and it is returning the json values all the time.

Similarly for the css, i have set the deny rule which is not working as expected.

We tried clearing the dispatcher cache multiple times which is of no effect.

/invalidate

{

/0003

{

     /glob "*.json"

     /type "allow"

}

}

 

/0082

     {

          /type "deny"

          /path "/*"

          /extension '(json)'

     }

/0087 { /type "allow" /method "GET" /extension 'json' "*.json" }

Any solution on this problem will be helpful.

    This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
    leoberliantAccepted solution
    Employee
    May 7, 2019 12:07 PM UTC

    Dispatcher calculates rules from the top to the bottom. It's a best practice to set the first rule as deny all and then define an explicit allow only to specific URLs

    View reply

    10 replies

    ShyamSundarAuthor
    Level 2
    May 14, 2019 7:09 AM UTC

    After dispatcher cache clearing, all my rules are working fine.

    Thanks all for your valuable suggestions.

    Cheers

    SHYAM SUNDAR

    Translate
    ShyamSundarAuthor
    Level 2
    May 9, 2019 6:47 AM UTC

    Hi JaideepBrar​

    This was the first way we tried in fact wherein we applied the deny on "/.json".

    Its not working.

    Thanks

    SHYAM SUNDAR

    Translate
    ShyamSundarAuthor
    Level 2
    May 9, 2019 6:44 AM UTC

    yes multiple restarts where done with no luck

    Translate
    leoberliant
    Employee
    May 8, 2019 1:20 PM UTC

    Did you restart an HTTP server after you mad a modification?

    Translate
    user05162
    Employee
    May 8, 2019 1:01 PM UTC

    Can you try a filter with deny on "/.json" ?

    Translate
    ShyamSundarAuthor
    Level 2
    May 8, 2019 12:24 PM UTC

    Tried the same but no luck.

    I still could see the json being rendered when i hit the URL in the browser.

    Translate
    leoberliant
    Employee
    May 8, 2019 12:13 PM UTC

    If you are intending to deny json request you should edit /filter section of a dispatcher configuration file and not an /invalidate section.

    You can try a rule similar to:

    /filter

    ....

    /0087 { /type "deny" /method "GET" /extension 'json' "*.1.json" }

    Translate
      ShyamSundarAuthor
      Level 2
      May 8, 2019 9:18 AM UTC

      Please find the below logs where it is checking .json and I should be getting the 404 error page as per the rule I set.

      But Instead, I receive the json file on the browser.

      The JSON response i receive,

      Kindly help me as these are simple rules which are being set in dispatcher.any file but in turn its not working.

      Translate
      leoberliantAccepted solution
      Employee
      May 7, 2019 12:07 PM UTC

      Dispatcher calculates rules from the top to the bottom. It's a best practice to set the first rule as deny all and then define an explicit allow only to specific URLs

      Translate
        user05162
        Employee
        May 7, 2019 11:23 AM UTC

        If you are talking about filters, it is deny all and allow only specific URL. So, you need to deny everything and only allow the files required for your site.

        That being said, change the dispatcher log level to DEBUG and try to make a request to those URL's. Logs will show you which filter is getting called and you can check on the changes required accordingly.

        Translate
          Terms & ConditionsAccessibility statement

          Loading footer...