[ http://jira.jboss.com/jira/browse/JBAS-2149?page=all ]
Dimitris Andreadis updated JBAS-2149:
-------------------------------------
Fix Version/s: JBossAS-5.0.0.CR1
(was: JBossAS-5.0.0.Beta3)
Moving to CR1. If there is a problem with this, please contact me.
> ByValueContainerInvoker
> -----------------------
>
> Key: JBAS-2149
> URL: http://jira.jboss.com/jira/browse/JBAS-2149
> Project: JBoss Application Server
> Issue Type: Bug
> Security Level: Public(Everyone can see)
> Components: Test Suite
> Reporter: Adrian Brock
> Fix For: JBossAS-5.0.0.CR1
>
>
> Remove the use of ByValueInvokerInterceptor from the testsuite.
> This was deprecated in JBoss4 and removed in JBoss5, it should be using the MarshalledInvokerInterceptor.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
implement instances of JBMICROCONT-178
--------------------------------------
Key: JBAS-4398
URL: http://jira.jboss.com/jira/browse/JBAS-4398
Project: JBoss Application Server
Issue Type: Sub-task
Security Level: Public (Everyone can see)
Components: ProfileService
Reporter: Mark Spritzler
implement the new interfaces defined by JBMICROCONT-178
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
NPE when trying to access remote portlets
-----------------------------------------
Key: JBPORTAL-1843
URL: http://jira.jboss.com/jira/browse/JBPORTAL-1843
Project: JBoss Portal
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: Portal Core Admin
Affects Versions: 2.6.3 Final
Reporter: Chris Laprun
Assigned To: Chris Laprun
Fix For: 2.6.4 Final
java.lang.NullPointerException
at org.jboss.portal.core.admin.ui.AdminPropertyResolver.getValueForRequestLocale(AdminPropertyResolver.java:444)
at org.jboss.portal.core.admin.ui.AdminPropertyResolver.access$000(AdminPropertyResolver.java:76)
at org.jboss.portal.core.admin.ui.AdminPropertyResolver$3.getValue(AdminPropertyResolver.java:131)
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
Have deployers implement ObjectModelBuilder
-------------------------------------------
Key: JBAS-4376
URL: http://jira.jboss.com/jira/browse/JBAS-4376
Project: JBoss Application Server
Issue Type: Task
Security Level: Public (Everyone can see)
Components: Deployment services, Management services
Reporter: Scott M Stark
Assigned To: Dimitris Andreadis
Fix For: JBossAS-5.0.0.Beta3
A container task for having deployers implement ObjectModelBuilder to provide the deployment management metadata.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
Track jboss and thirdparty dependencies upgrades for JBoss 5.0.0.Beta3
----------------------------------------------------------------------
Key: JBAS-4562
URL: http://jira.jboss.com/jira/browse/JBAS-4562
Project: JBoss Application Server
Issue Type: Task
Security Level: Public (Everyone can see)
Components: Other
Reporter: Dimitris Andreadis
Assigned To: Dimitris Andreadis
Fix For: JBossAS-5.0.0.Beta3
Track JBoss and thirdparty dependencies upgrades as subtasks.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
org.jboss.test.security.test.WebConstraintsUnitTestCase (Excluded Access failures)
----------------------------------------------------------------------------------
Key: JBAS-5069
URL: http://jira.jboss.com/jira/browse/JBAS-5069
Project: JBoss Application Server
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: Web (Tomcat) service
Affects Versions: JBossAS-5.0.0.Beta2
Environment: org.jboss.test.security.test.WebConstraintsUnitTestCase
Reproduce:
a) Start JBoss5
b) ant -Dtest=org.jboss.test.security.test.WebConstraintsUnitTestCase one-test
Reporter: Anil Saldhana
Assigned To: Remy Maucherat
Fix For: JBossAS-5.0.0.Beta3
With JBoss/Web, the excluded security constraints seem to be not working.
The web.xml is:
http://anonsvn.jboss.org/repos/jbossas/trunk/testsuite/src/resources/secu...
The errors are:
http://hudson.jboss.org/hudson/view/JBoss%20AS/job/JBoss-AS-5.0.x-TestSui...http://hudson.jboss.org/hudson/view/JBoss%20AS/job/JBoss-AS-5.0.x-TestSui...
Failing calls:
1) testGetAccess() [GET IS EXCLUDED as per security constraint "excluded"]
{
// Validate that the excluded subcontext if not accessible
url = new URL(baseURL+"web-constraints/restricted/get-only/excluded/x");
HttpUtils.accessURL(url, REALM, HttpURLConnection.HTTP_FORBIDDEN);
2) testExcludedAccess() [Security Constraint "Excluded GET"]
public void testExcludedAccess() throws Exception
{
String baseURL = HttpUtils.getBaseURL("getUser", "getUserPass");
// Test the excluded security-constraint
URL url = new URL(baseURL+"web-constraints/excluded/x");
HttpUtils.accessURL(url, REALM, HttpURLConnection.HTTP_FORBIDDEN);
......
Remy, please tell me if it is an issue with our security layer.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
SARDeployer metadata needs to be annotated for management
---------------------------------------------------------
Key: JBAS-4672
URL: http://jira.jboss.com/jira/browse/JBAS-4672
Project: JBoss Application Server
Issue Type: Sub-task
Security Level: Public (Everyone can see)
Components: Management services, System service
Reporter: Scott M Stark
Assigned To: Dimitris Andreadis
Fix For: JBossAS-5.0.0.Beta3
The SARDeployer metadata needs to be annotated for management to enable managed object creation.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
Identity SPI
------------
Key: SECURITY-93
URL: http://jira.jboss.com/jira/browse/SECURITY-93
Project: JBoss Security and Identity Management
Issue Type: Feature Request
Security Level: Public (Everyone can see)
Components: Identity
Affects Versions: 2.0.1.GA
Reporter: Anil Saldhana
Assigned To: Anil Saldhana
Fix For: 2.0.2-BETA
Need a first cut Identity API for the ACL implementation. Basically, we want to represent identity, role and group.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
Adapt Resource Interface for ACL
--------------------------------
Key: SECURITY-86
URL: http://jira.jboss.com/jira/browse/SECURITY-86
Project: JBoss Security and Identity Management
Issue Type: Feature Request
Security Level: Public (Everyone can see)
Components: Security SPI
Affects Versions: 2.0.1.GA
Reporter: Anil Saldhana
Assigned To: Anil Saldhana
Fix For: 2.0.2-BETA
The Authorization framework interface "Resource" needs to be adapted for the ACL implementation.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
AuthorizationManager interface needs ACL semantics
--------------------------------------------------
Key: SECURITY-87
URL: http://jira.jboss.com/jira/browse/SECURITY-87
Project: JBoss Security and Identity Management
Issue Type: Feature Request
Security Level: Public (Everyone can see)
Components: Security SPI
Affects Versions: 2.0.1.GA
Reporter: Anil Saldhana
Assigned To: Anil Saldhana
Fix For: 2.0.2-BETA
The AuthorizationManager interface needs to be upgraded to handle the fast ACL implementation needs.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira