Uploaded image for project: 'Application Server 7'
  1. Application Server 7
  2. AS7-5784

WSIntegrationProcessorJAXWS_EJB does not process @PermitAll, @DeclareRoles and @RolesAllowed properly

    XMLWordPrintable

Details

    Description

      WSIntegrationProcessorJAXWS_EJB does not process @PermitAll annotation on EJB3 endpoint classes at all, resulting in denied access if no @RolesAllowed/@DeclareRoles provided.
      Moreover, it erroneously mixes method and class @RolesAllowed annotations.

      Attachments

        Issue Links

          is related to

          Bug - A problem that impairs or prevents the functions of the product. AS7-5732 JAX-WS call is returning Status 403 - Access to the requested resource has been denied

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Bug - A problem that impairs or prevents the functions of the product. JBWS-3485 JBoss AS 7 requires authentication for unsecured @WebMethod

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          relates to

          Bug - A problem that impairs or prevents the functions of the product. WFLY-949 Deal with annotations from ejb3 ws endpoint super classes when checking declared roles

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Bug - A problem that impairs or prevents the functions of the product. WFLY-3988 Authorization denied for authenticated users when @PermitAll is used on EJB JAX-WS endpoint

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              rhn-support-asoldano Alessio Soldano
              rhn-support-asoldano Alessio Soldano
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: