[jboss-jira] [JBoss JIRA] (AS7-1298) JBoss AS 7 doesn't appear to support container-managed security via web.xml and jboss-web.xml

[Jason Greene (JIRA)]

     [ https://issues.jboss.org/browse/AS7-1298?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jason Greene updated AS7-1298:
------------------------------

    Fix Version/s: 7.1.2.Final
                       (was: 7.1.1.Final)


This issue is being relocated to 7.1.2 so that 7.1.1 only contains criticals, blockers, and EAP LA issues (which are probably not yet at the right status, or need an extra triage pass).

If these issues are completed in a 7.1.1 timeframe please change the fix version. Although if you forget I will bulk correct.
                
> JBoss AS 7 doesn't appear to support container-managed security via web.xml and jboss-web.xml
> ---------------------------------------------------------------------------------------------
>
>                 Key: AS7-1298
>                 URL: https://issues.jboss.org/browse/AS7-1298
>             Project: Application Server 7
>          Issue Type: Feature Request
>          Components: Documentation
>    Affects Versions: 7.0.0.Final
>         Environment: n/a
>            Reporter: Craig Ringer
>            Assignee: Darran Lofthouse
>             Fix For: 7.1.2.Final
>
>
> There's no documentation for container-managed security in JBoss AS 7, and the schema for the main jboss config files and jboss-web.xml don't suggest any configuration mechanisms for JAAS realms, principal-to-user/group mappings, etc.
> This is a significant limitation for apps porting from Glassfish 3, which expect to be able to access the current security principal from JNDI or inject it, and expect to be able to declare container-controlled access to particular URLs and different HTTP methods in web.xml.
> Documenting this limitation in AS 7.0.0 would be a big improvement and would save porting time and hassle. Implementing support in a future version would, of course, be ideal.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira