Merge pull request #13 from wpdebruin/development

prepend so no interference with main rules

Author: lmajano

interceptors/Security.cfc

@@ -96,12 +96,14 @@ component accessors="true" extends="coldbox.system.Interceptor" {
 		// Process Module Rules
 		arguments.settings.rules = variables.rulesLoader.normalizeRules( arguments.settings.rules, module );
 
-		// Append them
-		arrayAppend(
-			getProperty( "rules" ),
-			arguments.settings.rules,
-			true
-		);
+		// prepend them so the don't interfere with MAIN rules
+		// one by one as I don't see a way to prepend the whole array at once
+		for ( var i = arguments.settings.rules.len(); i >= 1; i-- ){
+			arrayPrepend(
+				getProperty( "rules" ),
+				arguments.settings.rules[i]
+			);
+		}
 
 		// Log it
 		log.info( "+ Registered module (#arguments.module#) with cbSecurity" );

test-harness/modules_app/mod1/ModuleConfig.cfc

@@ -34,8 +34,8 @@ component {
 				"invalidAuthorizationEvent"  : "mod1:secure.auth",
 				// You can define your security rules here or externally via a source
 				"rules"                      : [
-					{ "secureList" : "mod1:home" },
-					{ "secureList" : "mod1/modOverride", "match" : "url", "action" : "override" }
+					{ "secureList" : "mod1/modOverride", "match" : "url", "action" : "override" },
+					{ "secureList" : "mod1:home" }
 				]
 			}
 		};