December 2013 - jboss-jira - Jboss List Archives

[JBoss JIRA] (WFLY-447) Connection Reauthentication and Security Propagation

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-447?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-447: ------------------------------ Fix Version/s: 8.0.0.Final (was: 8.0.0.CR1) > Connection Reauthentication and Security Propagation > ---------------------------------------------------- > > Key: WFLY-447 > URL: https://issues.jboss.org/browse/WFLY-447 > Project: WildFly > Issue Type: Task > Security Level: Public(Everyone can see) > Components: EJB, Remoting, Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 8.0.0.Final > > > This task is a top level task to coordinate the addition of support for switching to different security identities on an existing connection over Remoting. > This is to predominantly cover two major scenarios: - > - Clients using a single connection but require different calls to be executed as different users, in this case the client has the information required to start a new authentication as a different user. > - Server to server communication where the first server has already authenticated a remote user - for this scenario the first server needs a way to tell the second server what identity to run the call as. > The following document is building up the requirements and design considerations and decisions: - > https://community.jboss.org/wiki/ConnectionRe-AuthenticationAndSecurityPr... -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFLY-442) Review of AccessController and PrivilegedAction use across AS7

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-442?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-442: ------------------------------ Fix Version/s: 8.0.0.Final (was: 8.0.0.CR1) > Review of AccessController and PrivilegedAction use across AS7 > -------------------------------------------------------------- > > Key: WFLY-442 > URL: https://issues.jboss.org/browse/WFLY-442 > Project: WildFly > Issue Type: Task > Security Level: Public(Everyone can see) > Components: Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Fix For: 8.0.0.Final > > > The following needs reviewing across AS7: - > - On demand instantiation of PrivilegedActions where singletons would suffice (Consider frequency of calls, gc may be preferable). > - Use of AccessController even though there is no SecurityManager set. > - Code duplication, in every case I have seen so far the code is the same regardless of if PRIVILEGED or NON_PRIVILEGED > - Utility methods with visibility too high. > - In depth review of the other methods, i.e. if the first thing a public method does is set the class loader based on a parameter passed in it could be used badly - it may even be a justification for that method to NOT use a PrivilegedAction. > - Code that requires to be executed using a PrivilegedAction should also be double checked that it is not doing too much as the identity of the caller. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFLY-443) Add integration test of Seam2 integration

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-443?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-443: ------------------------------ Fix Version/s: 8.0.0.Final (was: 8.0.0.CR1) > Add integration test of Seam2 integration > ----------------------------------------- > > Key: WFLY-443 > URL: https://issues.jboss.org/browse/WFLY-443 > Project: WildFly > Issue Type: Task > Security Level: Public(Everyone can see) > Components: Test Suite > Environment: https://github.com/jbossas/jboss-as/commit/b036d103ed503b0099d3f62c1c50f9... will break the Seam 2 integration since Seam2Processor will look for the specific jar name. Yet the commit did not result in any testsuite failure. So, it seems we have no integration testing. > Reporter: Brian Stansberry > Fix For: 8.0.0.Final > > -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFLY-428) Move DC operation stream cleaning from OperationCoordinatorStepHandler and into the OSHs that actual process the input streams

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-428?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-428: ------------------------------ Fix Version/s: 8.0.0.Final (was: 8.0.0.CR1) > Move DC operation stream cleaning from OperationCoordinatorStepHandler and into the OSHs that actual process the input streams > ------------------------------------------------------------------------------------------------------------------------------ > > Key: WFLY-428 > URL: https://issues.jboss.org/browse/WFLY-428 > Project: WildFly > Issue Type: Task > Security Level: Public(Everyone can see) > Components: Domain Management > Reporter: Brian Stansberry > Fix For: 8.0.0.Final > > > Get rid of hackaliciousness at [1] and replace using OperationAttachments the way Stuart did for deployment overlays. > [1] https://github.com/jbossas/jboss-as/blob/master/host-controller/src/main/... -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFLY-435) Validate servlet run as identity propagation

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-435?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-435: ------------------------------ Fix Version/s: 8.0.0.Final (was: 8.0.0.CR1) > Validate servlet run as identity propagation > -------------------------------------------- > > Key: WFLY-435 > URL: https://issues.jboss.org/browse/WFLY-435 > Project: WildFly > Issue Type: Task > Security Level: Public(Everyone can see) > Components: EJB, Security, Web (JBoss Web) > Reporter: Marcus Moyses > Assignee: Peter Skopek > Priority: Minor > Fix For: 8.0.0.Final > > > Need to validate if the run as identity configured in jboss-web.xml for a servlet is propagated to ejb invocations. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFLY-441) If possible, eliminate the NonTxEmCloser by closing the EM immediately after each EM invocation

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-441?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-441: ------------------------------ Fix Version/s: 8.0.0.Final (was: 8.0.0.CR1) > If possible, eliminate the NonTxEmCloser by closing the EM immediately after each EM invocation > ----------------------------------------------------------------------------------------------- > > Key: WFLY-441 > URL: https://issues.jboss.org/browse/WFLY-441 > Project: WildFly > Issue Type: Task > Security Level: Public(Everyone can see) > Components: JPA / Hibernate > Reporter: Scott Marlow > Priority: Minor > Fix For: 8.0.0.Final > > > For Queries, handoff the EntityManager to a Query object wrapper and have the Query object finalizer close the EntityManager. > Make sure that we respect JPA 2.0 section 3.8.6 (detach objects returned from Query object). > 1. Methods that return a Query, will hand off the EM to the Query object wrapper. > 2. Other methods will close the EM at the end of the EM method invocation. > When making this change, make sure that performance doesn't degrade. The cost of this change, will be that each (transaction scoped non-tx) EM invocation will create a new persistence context, but we can eliminate the NonTxEmCloser which has its own overhead. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFLY-436) Inline JGroups subsystem references to threads subsystem

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-436?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-436: ------------------------------ Fix Version/s: 8.0.0.Final (was: 8.0.0.CR1) > Inline JGroups subsystem references to threads subsystem > -------------------------------------------------------- > > Key: WFLY-436 > URL: https://issues.jboss.org/browse/WFLY-436 > Project: WildFly > Issue Type: Sub-task > Security Level: Public(Everyone can see) > Components: Clustering > Reporter: Paul Ferraro > Assignee: Paul Ferraro > Fix For: 8.0.0.Final > > > Currently, the JGroups subsystem defers to the threads subsystem to define thread pools and thread factories. Apparently, this is now frowned upon. Instead, the executors for the default pool, OOB pool, and timer pool should be defined inline. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFLY-416) Complete <xs:documentation> for all configuration elements/attributes in Infinispan subsystem's XSD

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-416?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-416: ------------------------------ Fix Version/s: 8.0.0.Final (was: 8.0.0.CR1) > Complete <xs:documentation> for all configuration elements/attributes in Infinispan subsystem's XSD > --------------------------------------------------------------------------------------------------- > > Key: WFLY-416 > URL: https://issues.jboss.org/browse/WFLY-416 > Project: WildFly > Issue Type: Task > Security Level: Public(Everyone can see) > Components: Clustering > Reporter: Martin Gencur > Assignee: Radoslav Husar > Fix For: 8.0.0.Final > > > Infinispan subsystem's XSD still contains a lot of elements/attributes which do NOT have their description: https://github.com/jbossas/jboss-as/blob/master/build/src/main/resources/... > It would be very useful for users to know what each element is supposed to do. > This document can help out: https://docspace.corp.redhat.com/docs/DOC-69249 -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFLY-418) TS: Move resources to source packages.

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-418?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-418: ------------------------------ Fix Version/s: 8.0.0.Final (was: 8.0.0.CR1) > TS: Move resources to source packages. > -------------------------------------- > > Key: WFLY-418 > URL: https://issues.jboss.org/browse/WFLY-418 > Project: WildFly > Issue Type: Task > Security Level: Public(Everyone can see) > Components: Test Suite > Reporter: Ondrej Zizka > Assignee: Ondrej Zizka > Priority: Minor > Fix For: 8.0.0.Final > > -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFLY-458) ServerInventory#reconnectServer should take auto-start into account

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-458?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-458: ------------------------------ Fix Version/s: 8.0.0.Final (was: 8.0.0.CR1) > ServerInventory#reconnectServer should take auto-start into account > ------------------------------------------------------------------- > > Key: WFLY-458 > URL: https://issues.jboss.org/browse/WFLY-458 > Project: WildFly > Issue Type: Task > Security Level: Public(Everyone can see) > Components: Domain Management > Reporter: Emanuel Muckenhuber > Fix For: 8.0.0.Final > > > When reconnecting to stopped (but not removed) servers, the ServerInventory should take the auto-start property into account. Otherwise the process will just get removed, however started with the next :reload of the HC. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

12 years, 7 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira December 2013