[TOMEE-744] @Asynchronous ejb call should propagate security principal

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.1
• Fix Version/s: 1.6.0.beta1, 1.6.0
• Assignee: Romain Manni-Bucau
• Reporter: chunlinyao
• Created: 20/Jan/13 12:57
• Updated: 22/Apr/13 21:47
• Resolved: 25/Feb/13 14:58

Description

When call sessionContext.getCallerPrincipal in a @Asynchronous method, It return a guest principal.
Section 4.5.4 of JSR 318 ejb 3.1 spec final release says it should propagate caller security principal.

> 4.5.4 Security
> Caller security principal propagates with an asynchronous method invocation. Caller security principal
> propagation behaves exactly the same for asynchronous method invocations as it does for synchronous
> session bean invocations.