regression - org.jboss.test.security.test.authorization.XACMLEJBIntegrationUnitTestCase
---------------------------------------------------------------------------------------
Key: JBAS-6166
URL: https://jira.jboss.org/jira/browse/JBAS-6166
Project: JBoss Application Server
Issue Type: Sub-task
Security Level: Public (Everyone can see)
Components: Security
Reporter: Dimitris Andreadis
Assignee: Stefan Guilhen
Priority: Critical
Fix For: JBossAS-5.0.0.GA
http://hudson.qa.jboss.com/hudson/view/JBoss%20AS/job/JBoss-AS-5.0.x-Test...
org.jboss.test.security.test.authorization.XACMLEJBIntegrationUnitTestCase.testMethodAccess
org.jboss.test.security.test.authorization.XACMLEJBIntegrationUnitTestCase.testJBAS6067
Stefan, those 2 failures crept in with the change in:
http://fisheye.jboss.com/changelog/JBossAS/?cs=80401
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
Release Security 2.0.2.GA Libraries
-----------------------------------
Key: SECURITY-304
URL: https://jira.jboss.org/jira/browse/SECURITY-304
Project: JBoss Security and Identity Management
Issue Type: Sub-task
Security Level: Public (Everyone can see)
Reporter: Anil Saldhana
Assignee: Anil Saldhana
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
Security Permissions for JNDI sensitive operations
--------------------------------------------------
Key: JBNAME-8
URL: https://jira.jboss.org/jira/browse/JBNAME-8
Project: JBoss Naming
Issue Type: Task
Components: jnpserver
Affects Versions: 5.0.0.CR2
Reporter: Anil Saldhana
Assignee: Scott M Stark
Fix For: 5.0.0.GA
ctx.rebind is the most critical.
Please add perms to all JNDI ops.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
VirtualFileURLConnection needs to override getPermission method
---------------------------------------------------------------
Key: JBVFS-71
URL: https://jira.jboss.org/jira/browse/JBVFS-71
Project: JBoss VFS
Issue Type: Task
Security Level: Public (Everyone can see)
Reporter: Anil Saldhana
If ever we figure out how to do VFS protocol handlers in to the Java security system, we will need this override of the getPermissions method because currently it is getting the base class URLConnection.getPermission which is just an all-permission.
================
http://java.sun.com/j2se/1.5.0/docs/api/java/net/URLConnection.html#getPe...
Returns a permission object representing the permission necessary to make the connection represented by this object. This method returns null if no permission is required to make the connection. By default, this method returns java.security.AllPermission. Subclasses should override this method and return the permission that best represents the permission required to make a a connection to the URL. For example, a URLConnection representing a file: URL would return a java.io.FilePermission object.
================
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
Ensure maven dependencies have right scope
------------------------------------------
Key: SECURITY-307
URL: https://jira.jboss.org/jira/browse/SECURITY-307
Project: JBoss Security and Identity Management
Issue Type: Sub-task
Security Level: Public (Everyone can see)
Components: ACL, Identity, JBossSX, Security SPI
Affects Versions: 2.0.2.CR11
Reporter: Anil Saldhana
Assignee: Stefan Guilhen
Fix For: 2.0.2.GA
scope - compile, runtime, test appropriately.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
Allow suspicious tokens
-----------------------
Key: JBVFS-72
URL: https://jira.jboss.org/jira/browse/JBVFS-72
Project: JBoss VFS
Issue Type: Task
Security Level: Public (Everyone can see)
Affects Versions: 2.0.0.CR5
Reporter: Ales Justin
Assignee: Ales Justin
Fix For: 2.0.0.GA
Allow for any kind of tokens in path.
Advanced users can set PathTokenizer::setErrorOnSuspiciousTokens to
disable some suspicious tokens.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira