Uploaded image for project: 'Geronimo'
  1. Geronimo
  2. GERONIMO-4526

ejbTimout method not subject to permission checks

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.1.4, 2.2
    • 2.1.4, 2.2
    • OpenEJB
    • Security Level: public (Regular issues)
    • None

    Description

      Right now if you have security enabled ejbTimeout calls don't work, they get an unauth exception.

      Need to fix it so the permissions that aren't from an interface get into the unchecked permissions. If someone adds the ejbTimeout method to an interface, that will get a different permission so the new unchecked permission shouldn't allow unwanted access.

      Attachments

        Activity

          People

            djencks David Jencks
            djencks David Jencks
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: