[ https://jira.jboss.org/jira/browse/JBESB-2324?page=com.atlassian.jira.plu... ] Daniel Bevenius commented on JBESB-2324: ---------------------------------------- Not sure if I understand what the issue ishere. Let me explain... I've modified the security_basic quickstart and using the attachted jboss-esb.xml 'ant runtest' This is the output on server console (with some comments): 12:29:45,254 INFO [STDOUT] In Service1 (jms transport secured): <-- Service is secured using jms transport 12:29:45,254 INFO [STDOUT] [Message payload example(just a String) ]. 12:29:45,255 INFO [STDOUT] Subject in MyListenerAction : Subject: Principal: esbuser Principal: Roles(members:esbrole) 12:29:45,322 INFO [STDOUT] In Service2 (jms transport secured): <-- Service is secured using jms transport 12:29:45,322 INFO [STDOUT] [Message payload example(just a String) ]. 12:29:45,323 INFO [STDOUT] Subject in MyListenerAction : Subject: Principal: esbuser Principal: Roles(members:esbrole) 12:29:45,371 INFO [STDOUT] In Service3 (invm transport non-secured): <-- Service is not secured using invm transport 12:29:45,371 INFO [STDOUT] [Message payload example(just a String) ]. 12:29:45,371 INFO [STDOUT] Subject in MyListenerAction : null <-- Subject not accessible to action pipeline 12:29:45,412 INFO [STDOUT] In Service4 (invm transport secured): <-- Service is secured using invm transport 12:29:45,412 INFO [STDOUT] [Message payload example(just a String) ]. 12:29:45,412 INFO [STDOUT] Subject in MyListenerAction : Subject: <-- Subject is accessible to action pipeline Principal: esbuser Principal: Roles(members:esbrole) So we are removing the context only so that the pipeline cannot access it but using the ServiceInvoker (through StaticRouter). Did I miss something here? -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/jira/browse/JBESB-2324?page=com.atlassian.jira.plu... ] Daniel Bevenius updated JBESB-2324: ----------------------------------- Attachment: jboss-esb.xml -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/jira/browse/JBESB-2324?page=com.atlassian.jira.plu... ] Kevin Conner commented on JBESB-2324: ------------------------------------- Any pipeline which contains more than one invocation of the SecurityInvoker will not pass the credentials across with the second and subsequent invocations. This could be through static routing to multiple endpoints, CBR to multiple endpoints, multiple actions in the pipeline. Any pipeline containing just one invocation of the SI will pass the credentials. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/jira/browse/JBESB-2324?page=com.atlassian.jira.plu... ] Daniel Bevenius updated JBESB-2324: ----------------------------------- Attachment: ServiceInvokerAction.java -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/jira/browse/JBESB-2324?page=com.atlassian.jira.plu... ] Kevin Conner reassigned JBESB-2324: ----------------------------------- Assignee: Kevin Conner (was: Daniel Bevenius) Talked with Daniel, I'm taking this one for now. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/jira/browse/JBESB-2324?page=com.atlassian.jira.plu... ] Kevin Conner commented on JBESB-2324: ------------------------------------- CP updated in revision 25025. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira