Uploaded image for project: 'Application Server 7'
  1. Application Server 7
  2. AS7-2853

Calling getCallerPrincipal should not be permitted on lifecycle methods - on @PreDestroy is allowed

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 7.1.0.Final
    • None
    • None
    • None

    Description

      Calling method on getCallerPrincipal should cause throwing IllegalStateException (EJB3.1 17.2.5) on lifecycle methods @PostConstruct, @PreDestroy but it returns anonymous identity role on @PreDestroy annotated method.

      Test could be found:
      https://github.com/ochaloup/jboss-as/blob/JBQA-5451-test-migration-getcallerprincipal/testsuite/integration/basic/src/test/java/org/jboss/as/test/integration/ejb/security/callerprincipal/SLSBLifecycleCallback.java

      Attachments

        Issue Links

          is blocked by

          Bug - A problem that impairs or prevents the functions of the product. AS7-1064 EJBContext.isCallerInRole and EJBContext.getCallerPrincipal do not throw IllegalStateException when not allowed

          • Critical - To be worked on immediately following BLOCKER issues.
          • Resolved

          Activity

            People

              sdouglas1@redhat.com Stuart Douglas
              ochaloup@redhat.com Ondrej Chaloupka (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: