[OPENEJB-1015] javax.ejb.EJBContext.getCallerPrincipal() not predictable

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0-beta-1, 3.0-beta-2, 3.0, 3.1
• Fix Version/s: 3.1.1
• Component/s: security
• Assignee: David Blevins
• Reporter: David Blevins
• Created: 06/Apr/09 23:28
• Updated: 06/Apr/09 23:42
• Resolved: 06/Apr/09 23:42

Description

The result of getCallerPrincipal can be random depending on list order. Code has been reworked so that JAAS Implementations may annotate the principal implementations with @CallerPrincipal to tell the org.apache.openejb.spi.SecurityService which principal to return from getCallerPrincipal.

Annotation used instead of an interface so that JAAS LoginModules can avoid a mandatory runtime dependency on any OpenEJB libraries.