Uploaded image for project: 'Jetspeed 2'
  1. Jetspeed 2
  2. JS2-589

PermissionManagerImpl use of ThreadLocal for caching causes inconsistent results

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 2.1-dev
    • Fix Version/s: 2.2.2
    • Component/s: Security
    • Labels:
      None
    • Environment:
      java 1.5, oracle, any OS

      Description

      PermissionManagerImpl uses ThreadLocal for permission caching. This means that once the permissions are loaded for one thread (ex. thread 1), they are there until someone changes the permissions using the PermissionManager (on that thread). If permissions are edited on another thread (thread 2), thread 1 never gets updated. So permissions are inconsistent until the portal is restarted.

        Attachments

          Activity

            People

            • Assignee:
              adouma Ate Douma
              Reporter:
              ethanadams Ethan Adams
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: