[OPENEJB-902] TomcatSecurityService should delegate isCallerInRole to Realm

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Invalid
• Affects Version/s: 4.7.0
• Fix Version/s: (not version related)
• Component/s: tomee
• Environment: Ubuntu Linux 8.04, i386
• Assignee: Unassigned
• Reporter: Luis Fernando Planella Gonzalez
• Created: 21/Aug/08 19:48
• Updated: 02/Jun/14 20:01
• Resolved: 09/Sep/08 15:12

Description

Since TomcatSecurityManager uses a Tomcat Realm to authenticate users, it is also expected that it override the isCallerInRole() method to delegate to Realm.hasRole() method.
Perhaps the isCallerAuthorized() method should be overridden too, using the same idea.