[JS2-589] PermissionManagerImpl use of ThreadLocal for caching causes inconsistent results

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.1-dev
• Fix Version/s: 2.2.2
• Component/s: Security
• Environment: java 1.5, oracle, any OS
• Assignee: Ate Douma
• Reporter: Ethan Adams
• Created: 28/Sep/06 00:47
• Updated: 11/May/11 15:28
• Resolved: 11/May/11 15:28

Description

PermissionManagerImpl uses ThreadLocal for permission caching. This means that once the permissions are loaded for one thread (ex. thread 1), they are there until someone changes the permissions using the PermissionManager (on that thread). If permissions are edited on another thread (thread 2), thread 1 never gets updated. So permissions are inconsistent until the portal is restarted.