March 2008 - jboss-dev-forums - Jboss List Archives

[Design of EJB 3.0] - Re: Security Regressions in EJB3 TestSuite

by ALRubinger

I triggered the run at: http://jboss.hudson.alrubinger.com/job/EJB3_Plugin_AS_TRUNK/88/ ...which should isolate that commit fairly well. :) S, ALR View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4139980#4139980 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4139980

16 years

1
0
0 / 0

[Design of EJB 3.0] - Re: Security Regressions in EJB3 TestSuite

by anil.saldhana＠jboss.com

ALR, I made a checkin with a change to the ejb3 auth interceptor. Can you verify the hudson run on Monday morning and update here with status? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4139970#4139970 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4139970

16 years

1
0
0 / 0

[Design of EJB 3.0] - Re: Security Regressions in EJB3 TestSuite

by ALRubinger

"anil.saldhana(a)jboss.com" wrote : But I still am at a loss as to why you are trying to retrieve the principal/caller principal in the tests. Please point me to the tests that are trying to do this. :) org.jboss.ejb3.test.dd.web.servlets.SecureServlet.processRequest() | org.jboss.ejb3.test.security.unit.TimerRunAsTestCase.testSecurityAssociation() | org.jboss.ejb3.test.security.unit.TimerRunAsTestCase.testNoSecurityAssociationPrincipal() | org.jboss.ejb3.test.security.TimerTesterBean().timeoutHandler() S, ALR View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4139938#4139938 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4139938

16 years

1
0
0 / 0

[Design of EJB 3.0] - Re: Security Regressions in EJB3 TestSuite

by anil.saldhana＠jboss.com

"ALRubinger" wrote : I couldn't find replacements for the following: | | SecurityAssociation.getPrincipal(); | | SecurityAssociation.getCallerPrincipal(); | | ...are there? | | S, | ALR Your tests should just be setting the principal/cred. Why are you trying to get the callerPrincipal from SecurityAssociation? What happened to ejbcontext.getCallerPrincipal? When will the spaghetti ejb3 layer look edible? :) Regarding getting the latest principal on the securitycontext, the api that you quote looks good. But I still am at a loss as to why you are trying to retrieve the principal/caller principal in the tests. Please point me to the tests that are trying to do this. :) View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4139936#4139936 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4139936

16 years

1
0
0 / 0

[Design of POJO Server] - Tests of JRMPInvoker

by bstansberry＠jboss.com

As part of my recent adventures in testsuite housecleaning, I saw that the testsuite jrmp-invoker target isn't executed during a testsuite run. The target runs a set of EJB2 tests with the JRMPInvoker replacing UnifiedInvoker. Any particular reason those aren't executed? If yes, any other good coverage of JRMPInvoker in the testsuite? If no, can we chuck the JRMPInvoker from AS 5 and require use of UnifiedInvoker? :-) As part of the testsuite cleanup, I got the jrmp-invoker target to run properly so if we want to keep JRMPInvoker we can add the target to the regular testsuite run. Further to all of the above, there is no "pooled-invoker" target that performs the same tests with the PooledInvoker. Same questions re: other coverage or dropping PooledInvoker apply. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4139931#4139931 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4139931

16 years

1
0
0 / 0

[Javassist development Forum] - Is Java 6 completely supported?

by memeplex

I'm running into issues like """ Caused by: java.lang.ArrayIndexOutOfBoundsException: 5 at javassist.bytecode.StackMapTable$Walker.sameLocals(StackMapTable.java:240) at javassist.bytecode.StackMapTable$Walker.stackMapFrames(StackMapTable.java:198) """ when instrumenting java 6 classes. The same classes compiled as java 5 are instrumented just fine. I have seen similar reports in the jboss aop list. In general, the suggestion is to stick to java 5 for the time being. So what is the status of java 6 support? TIA Regards -Carlos View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4139922#4139922 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4139922

16 years

1
0
0 / 0

[Design of EJB 3.0] - Re: Security Regressions in EJB3 TestSuite

by ALRubinger

Hmm...maybe: SecurityContextAssociation.getSecurityContext().getUtil().getUserPrincipal(); S, ALR View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4139905#4139905 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4139905

16 years

1
0
0 / 0

[Design of EJB 3.0] - Re: Security Regressions in EJB3 TestSuite

by ALRubinger

I couldn't find replacements for the following: SecurityAssociation.getPrincipal(); | SecurityAssociation.getCallerPrincipal(); ...are there? S, ALR View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4139903#4139903 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4139903

16 years

1
0
0 / 0

[Design of EJB 3.0] - Re: Security Regressions in EJB3 TestSuite

by anil.saldhana＠jboss.com

http://labs.jboss.com/file-access/default/members/jbosssecurity/freezone/... It should be fine to change the principal/cred combo without logout. All it does is set the SecurityContext on the threadlocal. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4139901#4139901 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4139901

16 years

1
0
0 / 0

[Design of EJB 3.0] - Re: Security Regressions in EJB3 TestSuite

by ALRubinger

Cool. Found that syntax elsewhere. Any docs relating to SecurityClient? If not... 1) Can you use the same instance of the client for many Principals? (ie. re-call setSimple() and invoke again using the new context) 2) If so, must you call logout()... and login().. again? S, ALR View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4139900#4139900 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4139900

16 years

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-dev-forums March 2008