EJBMethodPermissions.MethodSpec have incorrect serialization method. MethodSpec with parameters methodName=null, methodInterface=null, methodParam=null (that should match any method) deserializes with params methodName=null, methodInterface=null, methodParam="" (that matches any no-arg methos)!
As a result, EJB beans with all methods <unchecked/> do not work - AccessControlException is thrown (since methodParam="" means no-arg methods, whille methodParam=null means any methods).
Here is the simple patch:
Index: EJBMethodPermission.java
===================================================================
— EJBMethodPermission.java (revision 179589)
+++ EJBMethodPermission.java (working copy)
@@ -250,7 +250,7 @@
if (methodParams == null) {
if (methodInterface == null) {
if (methodName == null) {
- actions = ",,";
+ actions = "";
} else {
actions = methodName;
Bug
Closed
Major
"Unchecked" permissions for all EJB methods ("*") do not work