[jbossseam-issues] [JBoss JIRA] Closed: (JBSEAM-4044) Security NullPointerException regarding @RoleGroups

[Shane Bryzak (JIRA)]

     [ https://jira.jboss.org/jira/browse/JBSEAM-4044?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Shane Bryzak closed JBSEAM-4044.
--------------------------------

    Fix Version/s: 2.1.2.CR1
       Resolution: Done


Fixed in SVN, thanks for bringing this to my attention.

> Security NullPointerException regarding @RoleGroups
> ---------------------------------------------------
>
>                 Key: JBSEAM-4044
>                 URL: https://jira.jboss.org/jira/browse/JBSEAM-4044
>             Project: Seam
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 2.1.1.GA
>            Reporter: Grzegorz Matuszewski
>            Assignee: Shane Bryzak
>             Fix For: 2.1.2.CR1
>
>
> Using roles without role groups may lead to NullPointerException in JpaIdentityStore class. Methods getRoleGroups and listRoleMembers validate existence od role groups with test:
> if (roleGroupsProperty != null) 
>       {
> ...
>       }
> but should by 
> if (roleGroupsProperty.isSet())
>       {
> ...
>       }
> because roleGroupProperty is always instantiated  when using roles. See forum reference.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira