March 2007 - jboss-jira - Jboss List Archives

[JBoss JIRA] Created: (SECURITY-13) Authorization Framework should work off of the roles in the Security Context

by Anil Saldhana (JIRA)

Authorization Framework should work off of the roles in the Security Context ---------------------------------------------------------------------------- Key: SECURITY-13 URL: http://jira.jboss.com/jira/browse/SECURITY-13 Project: JBoss Security Issue Type: Task Security Level: Public (Everyone can see) Components: JBossSX Affects Versions: 2.0 Reporter: Anil Saldhana Assigned To: Anil Saldhana Fix For: 2.0 There has been a discussion going on with reference to a Security Context in JBossSX. Refer to the forum thread As it stands, the Security Context is populated with the roles for the authenticated user, but the access checks that are happening (mainly for the jacc layer) needs to move away from the reliance on the role-group placed as a principal in the authenticated subject, but to use the roles in the Security Context. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 2 months

2
1
0 / 0

[JBoss JIRA] Created: (JBRULES-534) Rename Column to Pattern

by Mark Proctor (JIRA)

Rename Column to Pattern ------------------------ Key: JBRULES-534 URL: http://jira.jboss.com/jira/browse/JBRULES-534 Project: JBoss Rules Issue Type: Feature Request Security Level: Public (Everyone can see) Components: All Reporter: Mark Proctor Assigned To: Mark Proctor Fix For: 3.1-m1 We are now going to refer to Column as Patterns, as it was confusing users. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 2 months

3
6
0 / 0

[JBoss JIRA] Created: (JBRULES-538) Add JBoss EULA

by Rajesh Rajasekaran (JIRA)

Add JBoss EULA -------------- Key: JBRULES-538 URL: http://jira.jboss.com/jira/browse/JBRULES-538 Project: JBoss Rules Issue Type: Feature Request Security Level: Public (Everyone can see) Reporter: Rajesh Rajasekaran Assigned To: Mark Proctor Fix For: 3.0.5 Attachments: JBossORG-EULA.txt Attached is the JBossORG-EULA.txt 1. The eula should be checked into the project's source tree. 2. The project's build should include the EULA in project distributables, ie, whatever is the unit of publish: zip, tgz, etc. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 2 months

3
6
0 / 0

[JBoss JIRA] Created: (JBRULES-693) automatic validation of rules on save - or user choice?

by Michael Neale (JIRA)

automatic validation of rules on save - or user choice? ------------------------------------------------------- Key: JBRULES-693 URL: http://jira.jboss.com/jira/browse/JBRULES-693 Project: JBoss Rules Issue Type: Sub-task Security Level: Public (Everyone can see) Reporter: Michael Neale Assigned To: Michael Neale -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 2 months

3
6
0 / 0

[JBoss JIRA] Created: (JBRULES-613) Can't use dollar ($) char in Rule Name with Janino compiler

by Bree VanOss (JIRA)

Can't use dollar ($) char in Rule Name with Janino compiler ----------------------------------------------------------- Key: JBRULES-613 URL: http://jira.jboss.com/jira/browse/JBRULES-613 Project: JBoss Rules Issue Type: Bug Security Level: Public (Everyone can see) Components: Drl Parser/Builder Affects Versions: 3.0.5 Environment: Verified on WinXP and OS X Reporter: Bree VanOss Assigned To: Mark Proctor Priority: Minor Essentially it appears that any rule using the U.S. Dollar character ($) in the rule name fails when compiled with Janino. I was able to reproduce the issue using the "default" new JBoss-rules project wizard in Eclipse. The stack trace follows, though it may not be much help. I tried tracking it down and it looks like the problem is actually caused in the parse/compilation step (i.e. builder.addPackageFromDrl( source );). After this step the rule in question has a null "consequence", which causes the "AbstractRuleBase.addRule(...)" method to fail when it does the isValid() check. <code> java.lang.IllegalArgumentException: The rule called Show me da $ is not valid. Check for compile errors reported. at org.drools.common.AbstractRuleBase.addRule(Unknown Source) at org.drools.reteoo.ReteooRuleBase.addRule(Unknown Source) at org.drools.common.AbstractRuleBase.addPackage(Unknown Source) at com.sample.DroolsTest.readRule(DroolsTest.java:89) at com.sample.DroolsTest.main(DroolsTest.java:29) </code> -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 2 months

3
5
0 / 0

[JBoss JIRA] Created: (SECURITY-23) NullPointerException in JaasSecurityManager.getPrincipal()

by Alex Besogonov (JIRA)

NullPointerException in JaasSecurityManager.getPrincipal() ---------------------------------------------------------- Key: SECURITY-23 URL: http://jira.jboss.com/jira/browse/SECURITY-23 Project: JBoss Security Issue Type: Bug Security Level: Public (Everyone can see) Reporter: Alex Besogonov Assigned To: Anil Saldhana JaasSecurityManager.getPrincipal() does not check for empty domainCache. This method is called, for example, when JAAS is used from web layer. Trivial fix, add in the start of the method: if( domainCache == null ) return principal; -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 2 months

2
5
0 / 0

[JBoss JIRA] Created: (JBRULES-577) Please add "contained by" syntax for constraints

by Dirk Bergstrom (JIRA)

Please add "contained by" syntax for constraints ------------------------------------------------ Key: JBRULES-577 URL: http://jira.jboss.com/jira/browse/JBRULES-577 Project: JBoss Rules Issue Type: Feature Request Security Level: Public (Everyone can see) Components: Drl Parser/Builder Reporter: Dirk Bergstrom Assigned To: Mark Proctor I'd like to be able to write a constraint to determine if a field's value is a member of some collection. This is the inverse of the "contains" keyword. The proposed syntax is: [bindingVar :] <fieldName> in <someCollection> (I'm not picky about the keyword, other possibilities are "containedBy" or "memberOf", but "in" is a single word) Use case: I have a container class with a field that exposes a collection of record numbers. In the working memory, I have a bunch of record objects, and one container object. I want to write a rule that fires when it encounters a container that has records matching some criteria: when Container( $recordNums : records ) Record( number in $recordNums, otherField == "somevalue" ) then doStuff(); The current workaround is: Record( num : number -> ( $recordNums.contains(num) ) ) Which is problematic, as the predicate may not be time-constant. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 2 months

5
7
0 / 0

[JBoss JIRA] Created: (SECURITY-22) Concurrency bug in JaasSecurityManager

by Alex Besogonov (JIRA)

Concurrency bug in JaasSecurityManager -------------------------------------- Key: SECURITY-22 URL: http://jira.jboss.com/jira/browse/SECURITY-22 Project: JBoss Security Issue Type: Bug Security Level: Public (Everyone can see) Components: JBossSX Affects Versions: 2.0 Reporter: Alex Besogonov Assigned To: Anil Saldhana JaasSecurityManager$DomainInfo.destroy calls logout() when cached entry expires, even while it is used by another thread. Suppose we have two threads: Thread 1: 1. 'User1' authentication 2. 'User1' is added to auth cache 3. Doing some lengthy operation 4. Checking roles of User1 - WILL FAIL, another thread has called logout()! Thread 2 (when Thread1 is doing 'some lengthy operation' ): 1. 'User1' logs in. 2. Auth cache entry has expired. 3. Calling .logout() on stale entry -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 2 months

2
2
0 / 0

[JBoss JIRA] Created: (GPD-57) nullpointer while deleting start state

by Tom Baeyens (JIRA)

nullpointer while deleting start state -------------------------------------- Key: GPD-57 URL: http://jira.jboss.com/jira/browse/GPD-57 Project: JBoss jBPM GPD Issue Type: Bug Reporter: Tom Baeyens Assigned To: Koen Aers -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 2 months

3
7
0 / 0

[JBoss JIRA] Created: (JBMICROCONT-117) Breaking up the MC project and Mavenizing it

by Ales Justin (JIRA)

Breaking up the MC project and Mavenizing it -------------------------------------------- Key: JBMICROCONT-117 URL: http://jira.jboss.com/jira/browse/JBMICROCONT-117 Project: JBoss MicroContainer Issue Type: Task Components: General Reporter: Ales Justin Assigned To: Ales Justin Priority: Minor Fix For: JBossMC_2_0_0_CR1 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 2 months

2
2
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira March 2007