Hi Bill,
We've gone and checked out the latest embedded stuff and built it from SVN. FYI, it
worked well and was not very hard to convert our tests over to use the new Bootstrap
class.
However, we are getting exactly the same security problem still. Instead of a
NullPointerException in Util.getSubjectRoles(), we get the IllegalArgumentException
because this class has been updated to check for null.
Here is our stacktrace:
| java.lang.IllegalArgumentException: Subject is null
| at org.jboss.security.Util.getSubjectRoles(Util.java:632)
| at
org.jboss.security.plugins.JBossAuthorizationManager.getCurrentRoles(JBossAuthorizationManager.java:302)
| at
org.jboss.security.plugins.JBossAuthorizationManager.doesUserHaveRole(JBossAuthorizationManager.java:126)
| at
org.jboss.security.plugins.JaasSecurityManager.doesUserHaveRole(JaasSecurityManager.java:401)
| at org.jboss.ejb3.BaseSessionContext.isCallerInRole(BaseSessionContext.java:233)
| .....
|
Would you like me to update JIRA to show that this bug is also present in the latest code
based on JBoss5?
thanks,
daniel.
"bill.burke(a)jboss.com" wrote : We've totally scrapped Embedded EJB3 and
started the Embedded JBoss project based on JBoss 5 kernel. New Embedded JBoss will be
full featured. Most features of regular jboss should be available in embedded.
|
| If you want to testdrive, checkout head SVN. its in the jboss-head/embedded
directory.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4005051#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...