[GERONIMO-516] GeronimoPolicy tries to use guaranteed open PolicyConfigurations as if they are in service

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0-M3
• Component/s: security
• Assignee: Alan Cabrera
• Reporter: David Jencks
• Created: 05/Dec/04 19:56
• Updated: 09/Jan/07 08:39
• Resolved: 05/Dec/04 22:13

Description

JACC spec 3.1.1.1 assures us that
GeronimoPolicyConfiguration configuration = (GeronimoPolicyConfiguration)factory.getPolicyConfiguration(contextID, false);

will always return a PolicyConfiguration that is in the open state.

The next line is:

if (configuration.inService()) {
if (configuration.implies(domain, permission)) return true;

This bug was hidden by the previous behavior of not opening configurations when getPolicyConfiguration was called.