Uploaded image for project: 'EJB 3.0'
  1. EJB 3.0
  2. EJBTHREE-1588

Run EJB3 Integration TestSuite under a Security Manager

    XMLWordPrintable

Details

    • Task
    • Resolution: Unresolved
    • Major
    • Unscheduled
    • None
    • testsuite
    • None

    Description

      AS TestSuite has exposed unprotected access across the EJB3 implementation, resulting in access exceptions.

      To further guard against this, enable a permissive security manager while running the EJB3 Integration TestSuite to ensure all relevant calls are checking access in privileged blocks.

      -Djava.security.manager
      -Djava.security.policy==<location_of_policyfile>
      -Djava.security.debug=access,failure,policy

      Attachments

        Issue Links

          relates to

          Sub-task - The sub-task of the issue EJBTHREE-1587 SessionSpecContainer missing a privileged block

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed

          Bug - A problem that impairs or prevents the functions of the product. EJBTHREE-1586 ClassHelper missing privileged blocks

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              arubinge@redhat.com Andrew Rubinger (Inactive)
              arubinge@redhat.com Andrew Rubinger (Inactive)
              Votes:
              1 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated: