[esb-issues] [JBoss JIRA] Work started: (JBESB-2122) Investigate the jBPM security

Investigate the jBPM security ----------------------------- Key: JBESB-2122 URL: https://jira.jboss.org/jira/browse/JBESB-2122 Project: JBoss ESB Issue Type: Task Security Level: Public(Everyone can see) Components: Security Affects Versions: 4.4 CP1 Reporter: Kevin Conner Assignee: Daniel Bevenius Fix For: 4.4 CP1 jBPM does not appear to support the JAAS context as a security measure, as a consequence the security information is currently being lost when communicating through jBPM. We need to investigate the jBPM mechanisms and provide some way to propagate the context. It may well be that the simplest solution, for now, will be for the context to be stored during the process creation and then have that reused for all communications. The ideal solution would be to link in with the jBPM mechanism so that changed in 'actors' could be tracked and acted on accordingly.