December 2008 - jboss-dev-forums - Jboss List Archives

[Design of JBoss jBPM] - Re: SubjectAuthenticationService / ActorId from JAAS

by camunda

anonymous wrote : But I assume this is not corrected now ;-) No, the changes doesn't have anything to do with the identity module... View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4196074#4196074 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4196074

17 years, 3 months

1
0
0 / 0

[Design of JBoss jBPM] - Re: SubjectAuthenticationService / ActorId from JAAS

by kukeltje

anonymous wrote : We decided for adding the authenticated actor to the JMS message (via JmsMessageFactory) and log in again in the MDB by reading the credentials from the JMS message... That is what I normally do as well. anonymous wrote : This code was "half baked" already there, and yes, it will be jbpm 3.3.1... The identity module is, service wise, half baked anyway (no offence Tom). There is no real interface that someone else could implement etc, hard coded things etc... But I assume this is not corrected now ;-) I'll check things out... tnx View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4196070#4196070 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4196070

17 years, 3 months

1
0
0 / 0

[Design of JBoss jBPM] - Re: Task Management component?

by aapthorp

"tom.baeyens(a)jboss.com" wrote : we could set up a module in the jbpm4 trunk for this. would that be a good starting point for you ? | | how about library dependencies ? Tom, In the first instance I'd like to make a jar available to allow people to experiment with. What would be the best way of doing this? Like a lot of these things this 'project' has evolved and the code needs a bit of restructuring to separate the CalDav generic code from the JBPM specific...also would be good to get it on to JBPM 4. Hence the original questions in this thread... Library dependencies are limited to iCal4j (dependent on commons-lang-2.3.jar) and currently Tomcat's servlets-default.jar and servlets-webdav.jar. I hope I can do away with the Tomcat dependency. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4196065#4196065 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4196065

17 years, 3 months

1
0
0 / 0

[Design of Security on JBoss] - Re: Invalid Issue: SECURITY-340

by ALRubinger

"scott.stark(a)jboss.org" wrote : The first issue is just to get the privileged block in place and the test will pass. Its a secondary issue to update the stack configuration. Yes, this is done and passing when running the test against EJB3 Plugin. The next EJB3 release will bring this in as a default. This is in addition to the other fixes I'd done yesterday to bring tests-security-manager green. One failure remains as UnAuthorized; Anil will look at it. S, ALR View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4196051#4196051 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4196051

17 years, 3 months

1
0
0 / 0

[Design of Security on JBoss] - Re: Invalid Issue: SECURITY-340

by scott.stark＠jboss.org

The first issue is just to get the privileged block in place and the test will pass. Its a secondary issue to update the stack configuration. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4196050#4196050 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4196050

17 years, 3 months

1
0
0 / 0

[Design of Security on JBoss] - Re: Invalid Issue: SECURITY-340

by anil.saldhana＠jboss.com

"scott.stark(a)jboss.org" wrote : I don't see where the Ejb3AuthenticationInterceptorv2 is being configured in a AS deployment, so I don't see how that can be addressed as a JBAS issue. I guess its this AuthenticationInterceptorFactory in ejb3-interceptors-aop.xml that is creating the interceptor: | | | | <interceptor factory="org.jboss.ejb3.security.AuthenticationInterceptorFactory" scope="PER_CLASS"/> | | | | but then that needs to be updated to allow for injection, or more likely the stack of interceptors needs to be created directly as beans. What's the state of the -aop.xml supporting fully configured stack of beans rather than using this older factory based creation? | I do not think the injection mechanism exists yet. The JIRA issue that I created was primarily to get something along those lines started. We really need to be able to create ejb container in the AS to allow direct injection. Currently the ejb2 deployer based approach to creating containers is also not modern. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4196047#4196047 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4196047

17 years, 3 months

1
0
0 / 0

[Design of Security on JBoss] - Re: Invalid Issue: SECURITY-340

by ALRubinger

So how would we like to move forward? And who becomes the maintainer of EJB3 security integration? S, ALR View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4196046#4196046 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4196046

17 years, 3 months

1
0
0 / 0

[Design of Security on JBoss] - Re: Invalid Issue: SECURITY-340

by anil.saldhana＠jboss.com

That jira issue was created when ejb3 resided in the AS workspace. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4196045#4196045 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4196045

17 years, 3 months

1
0
0 / 0

[Design of Security on JBoss] - Re: Invalid Issue: SECURITY-340

by scott.stark＠jboss.org

I don't see where the Ejb3AuthenticationInterceptorv2 is being configured in a AS deployment, so I don't see how that can be addressed as a JBAS issue. I guess its this AuthenticationInterceptorFactory in ejb3-interceptors-aop.xml that is creating the interceptor: | <interceptor factory="org.jboss.ejb3.security.AuthenticationInterceptorFactory" scope="PER_CLASS"/> | but then that needs to be updated to allow for injection, or more likely the stack of interceptors needs to be created directly as beans. What's the state of the -aop.xml supporting fully configured stack of beans rather than using this older factory based creation? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4196044#4196044 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4196044

17 years, 3 months

1
0
0 / 0

[Design of Security on JBoss] - Re: Invalid Issue: SECURITY-340

by ALRubinger

"scott.stark(a)jboss.org" wrote : 2. A privileged block in the Ejb3AuthenticationInterceptorv2 around the call to the JBossSecurityContext.setSecurityManagement at line 119: Yes, took care of this earlier today: https://jira.jboss.org/jira/browse/EJBTHREE-1619. "scott.stark(a)jboss.org" wrote : The TODO about having the SecurityManagement instance injected rather than created anew each time also seems like an issue. I believe this is https://jira.jboss.org/jira/browse/JBAS-4722. S, ALR View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4196042#4196042 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4196042

17 years, 3 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-dev-forums December 2008