[JBoss JIRA] Created: (JBAS-5066) InstanceInterceptors need to set SecurityContext on EnterpriseContext from Threadlocal
by Anil Saldhana (JIRA)
InstanceInterceptors need to set SecurityContext on EnterpriseContext from Threadlocal
--------------------------------------------------------------------------------------
Key: JBAS-5066
URL: http://jira.jboss.com/jira/browse/JBAS-5066
Project: JBoss Application Server
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: EJB2, Security
Affects Versions: JBossAS-5.0.0.Beta2
Reporter: Anil Saldhana
Assigned To: Anil Saldhana
Fix For: JBossAS-5.0.0.Beta3
Currently, the StatelessInstanceInterceptor is doing
ctx.setSecurityContext(mi.getSecurityContext());
which leads to an error in the audit log (Note: CLIENT_PROXY) as:
--------------------------------------------
2007-12-09 08:06:25,734 TRACE [org.jboss.security.audit.providers.LogAuditProvid
er] (WorkerThread#0[127.0.0.1:1180]:) [Error]roleRefPermissionCheck=true;authori
zationManager=[AuthorizationManager:class=org.jboss.security.plugins.JBossAuthor
izationManager:CLIENT_PROXY:];roleName=InternalRole;Resource:=[org.jboss.securit
y.authorization.resources.EJBResource:contextMap={roleRefPermissionCheck=true, r
oleName=InternalRole, authorizationManager=[AuthorizationManager:class=org.jboss
.security.plugins.JBossAuthorizationManager:CLIENT_PROXY:]}:method=null:ejbMetho
dInterface=null:ejbName=Entity:ejbPrincipal=scott:methodRoles=null:securityRoleR
eferences=[]];Source=org.jboss.security.integration.ejb.EJBAuthorizationHelper;E
xception:=Authorization Failed: ;
------------------------------------------------------------
what needs to be done is:
ctx.setSecurityContext(SecurityActions.getSecurityContext());
For StatefulInstanceInterceptor which gets invoked before SecurityInterceptor, create a new sec ctx based on the container settings.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
16 years, 11 months
[JBoss JIRA] Created: (JBCACHE-1165) Endless loop in PessimisticLockInterceptor
by Jacek Halat (JIRA)
Endless loop in PessimisticLockInterceptor
------------------------------------------
Key: JBCACHE-1165
URL: http://jira.jboss.com/jira/browse/JBCACHE-1165
Project: JBoss Cache
Issue Type: Bug
Security Level: Public (Everyone can see)
Affects Versions: 1.4.1.SP4
Environment: Windows XP, Sun jdk150_06
Solaris 10
Reporter: Jacek Halat
Assigned To: Manik Surtani
When 2 Threads are simulatanous putting/removing values from this same node TreeCache hang's up and goes into endless loop.
Main loop looks like:
for (int x = 0; x < 1000; x++) {
tm.begin();
System.out.println("R" + Thread.currentThread().getName());
//inside transaction
cache.remove("/a");
System.out.println("AR" + Thread.currentThread().getName());
tm.commit();
//outside transaction
System.out.println("P" + Thread.currentThread().getName());
cache.put("/a/b/c/d", "text"+x,"b");
System.out.println("AP" + Thread.currentThread().getName());
}
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
16 years, 11 months
[JBoss JIRA] Created: (JBAS-4997) Package StatefulPassivationActivationUnitTestCase with its own HAPartition
by Brian Stansberry (JIRA)
Package StatefulPassivationActivationUnitTestCase with its own HAPartition
--------------------------------------------------------------------------
Key: JBAS-4997
URL: http://jira.jboss.com/jira/browse/JBAS-4997
Project: JBoss Application Server
Issue Type: Task
Security Level: Public (Everyone can see)
Components: Clustering, Test Suite
Reporter: Brian Stansberry
Assigned To: Brian Stansberry
Priority: Minor
This test does thousands of invocations from a single thread. This makes it prone to timeout if nagling or JGroups message bundling are enabled on the HAPartition channel, since the single thread doesn't generate enough *concurrent* load to trigger prompt message transmission.
We should deploy the test with a partition with its own channel so we don't have to factor this test into whether or not we want nagling/bundling on the standard channel.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
16 years, 11 months
[JBoss JIRA] Created: (EJBTHREE-853) Partial StringProperty replacement in ejb 3 container
by Roland R?z (JIRA)
Partial StringProperty replacement in ejb 3 container
-----------------------------------------------------
Key: EJBTHREE-853
URL: http://jira.jboss.com/jira/browse/EJBTHREE-853
Project: EJB 3.0
Issue Type: Feature Request
Affects Versions: EJB 3.0 RC9 - FD
Reporter: Roland R?z
I tried to change the messageSelector in an EJB 3.0 MDB in the ejb.jar.xml containing partial System Property references (aaa${xyz}bbb). Sadly this didn't work as with ejb 2.1.
I think fully supporting system property replacement as with ejb 2.x in EJB 3.0 would be a nice feature.
The method org.jboss.ejb3.metamodel.EjbJarDDObjectFactory.getValue(String name, String value)
could be changed to
{
value = org.jboss.util.StringPropertyReplacer.replaceProperties(value);
}
I would suggest, to implement the string property replacement even better in the class org.jboss.metamodel.descriptor.DDObjectFactory.getValue()
and remove the getValue method from JBossDDObjectFactory and EjbJarDDObjectFactory.
The idea of using an MBean abstraction to replace system properties is fine but the nice syntax of the StringPropertyReplacer should be still supported (${v1,v2:default}). Returning always the replaced property is one possibility (currently it is not done this way) but probably a new method "getReplaced" would be less surprising.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
16 years, 11 months
[JBoss JIRA] Created: (JGRP-375) Paralellize discovery phase
by Bela Ban (JIRA)
Paralellize discovery phase
---------------------------
Key: JGRP-375
URL: http://jira.jboss.com/jira/browse/JGRP-375
Project: JGroups
Issue Type: Feature Request
Affects Versions: 2.4
Reporter: Bela Ban
Assigned To: Bela Ban
Fix For: 2.6
With TCPPING, if we have 10 servers defined in the list, we sequentially send a GET_MBRS_REQ to each. However, if that server is not reachable, we will timeout out on the socket connect call. Also, DNS lookup might take some time, so we might time out if we cannot contact all servers. Example: servers 1 - 10. 1-9 are down or not reachable, plus we have a slow DNS, 10 is running. So before we get to 10, the discovery will timeout and we will become a singleton node.
SOLUTION: use threads from the common (global) thread pool in JGroups to parallelize the sending of requests to all 10 servers.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
16 years, 11 months