[GERONIMO-4155] Can use a run-as role without defining it

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.1, 2.1.4, 2.2
• Fix Version/s: 2.2
• Component/s: deployment, web
• Security Level: public (Regular issues)
• Assignee: David Jencks
• Reporter: David Jencks
• Created: 23/Jun/08 21:51
• Updated: 30/Jul/09 22:07
• Resolved: 30/Jul/09 22:07

Description

The testsuite/enterprise-testsuite/sec-tests app demonstrates that you can set up a servlet with a run-as role of "baz" that is not mapped to a subject in the geronimo security element and the app will deploy and run fine. This should result in a deployment error and failing that a runtime error.

problem present in trunk rev. 670237

Issue Links

• relates to: GERONIMO-660 Referential integrity checking on role names