[jboss-cvs] JBossAS SVN: r63509 - trunk/security/src/main/org/jboss/security/integration/ejb.

[jboss-cvs-commits at lists.jboss.org]

Author: anil.saldhana at jboss.com
Date: 2007-06-13 15:32:44 -0400 (Wed, 13 Jun 2007)
New Revision: 63509

Modified:
   trunk/security/src/main/org/jboss/security/integration/ejb/EJBAuthorizationHelper.java
   trunk/security/src/main/org/jboss/security/integration/ejb/SecurityActions.java
Log:
SECURITY-62: differentiate incoming/outgoing runas

Modified: trunk/security/src/main/org/jboss/security/integration/ejb/EJBAuthorizationHelper.java
===================================================================
--- trunk/security/src/main/org/jboss/security/integration/ejb/EJBAuthorizationHelper.java	2007-06-13 19:31:09 UTC (rev 63508)
+++ trunk/security/src/main/org/jboss/security/integration/ejb/EJBAuthorizationHelper.java	2007-06-13 19:32:44 UTC (rev 63509)
@@ -141,7 +141,7 @@
       map.put(ResourceKeys.EJB_NAME ,ejbName); 
       map.put(ResourceKeys.EJB_PRINCIPAL, ejbPrincipal); 
       map.put(ResourceKeys.AUTHORIZATION_MANAGER,am); 
-      map.put(ResourceKeys.RUNASIDENTITY, securityContext.getUtil().getCallerRunAs());
+      map.put(ResourceKeys.RUNASIDENTITY, securityContext.getIncomingRunAs());
       map.put(ResourceKeys.SECURITY_ROLE_REFERENCES, securityRoleRefs);
       map.put(ResourceKeys.ROLENAME, roleName);
       map.put(ResourceKeys.ROLEREF_PERM_CHECK, Boolean.TRUE);

Modified: trunk/security/src/main/org/jboss/security/integration/ejb/SecurityActions.java
===================================================================
--- trunk/security/src/main/org/jboss/security/integration/ejb/SecurityActions.java	2007-06-13 19:31:09 UTC (rev 63508)
+++ trunk/security/src/main/org/jboss/security/integration/ejb/SecurityActions.java	2007-06-13 19:32:44 UTC (rev 63509)
@@ -50,7 +50,7 @@
             
             if(securityContext != null)
             {
-               caller = securityContext.getUtil().getCallerRunAs(); 
+               caller = securityContext.getIncomingRunAs(); 
                //If there is no caller run as, use the call principal
                if(caller == null)
                   caller = securityContext.getUtil().getUserPrincipal();