Uploaded image for project: 'Application Server 3  4  5 and 6'
  1. Application Server 3 4 5 and 6
  2. JBAS-1493

IsCallerInRole with anonymous caller/run-as does not see run-as role

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Obsolete
    • Icon: Major Major
    • No Release
    • JBossAS-3.2.7 Final
    • Security
    • None

      And MDB using a run-as role along a call path:
      DeepRunAsMDB -> Level1MDBCallerBean.callEcho() ->
      Level2CallerBean.invokeEcho() -> Level3CalleeBean.echo()

      properly uses the run-as role for access to the ejbs, but we have a weaker notion in 3.2 vs 4.0 of how the run-as should show up in the isCallerInRole context call, and this test validates that the run-as role is seen by isCallerInRole. The 3.2 implementation needs to be updated to support this as well.

              starksm64 Scott Stark (Inactive)
              starksm64 Scott Stark (Inactive)
              Votes:
              1 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: