[JS1-237] [PATCH] SecurityCacheImpl overwites cached permissions

• Type: Bug
• Status: Resolved
• Resolution: Fixed
• Affects Version/s: 1.4b4-dev / CVS
• Component/s: Security
• Environment: Operating System: Windows NT/2K; Platform: PC
• Bugzilla Id: 17734
• Assignee: Unassigned
• Reporter: Stuart Belden
• Created: 07/Mar/03 02:02
• Updated: 16/Feb/11 21:04
• Resolved: 24/Mar/04 14:34

Description

SecurityCacheImpl caches all existing roles and their associated permissions
when it is first invoked. When assigning an existing role to any user,
SecurityCacheImpl adds that role for the user and then overwites that Role's
permissions with a blank HashMap. This effectively removes all permissions for
that role for every user.

This can be fixed by checking to see if the Role has already been cached in
addRole(username, Role). This check is already done in addRole(Role).