Uploaded image for project: 'Geronimo'
  1. Geronimo
  2. GERONIMO-2313

Subject not propagated correctly between web app and ejb

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 1.1, 1.1.1, 1.1.x
    • 1.1.1, 1.1.2, 1.2
    • None
    • Security Level: public (Regular issues)
    • None

    Description

      With a web app with security, that calls an ejb, isCallerInRole in the ejb always returns false.

      this is caused by the web app not setting nextCaller and the ejb interceptors shifting nextCaller to currentCaller, so when the isCallerInRole is tested there is a null subject.... so it returns false.

      Attachments

        1. ejbrefsec.src.jar
          41 kB
          David Jencks
        2. ejbrefsec-ear-1.0-SNAPSHOT.ear
          12 kB
          David Jencks
        3. GERONIMO-2313.diff
          55 kB
          David Jencks
        4. GERONIMO-2313-openejb.diff
          7 kB
          David Jencks

        Activity

          People

            djencks David Jencks
            djencks David Jencks
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: