March 2015 - jboss-jira - Jboss List Archives

[JBoss JIRA] (WFLY-442) Review of AccessController and PrivilegedAction use across AS7

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-442?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-442: ------------------------------ Fix Version/s: 9.0.0.CR1 (was: 9.0.0.Beta1) > Review of AccessController and PrivilegedAction use across AS7 > -------------------------------------------------------------- > > Key: WFLY-442 > URL: https://issues.jboss.org/browse/WFLY-442 > Project: WildFly > Issue Type: Task > Components: Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Labels: investigation_required > Fix For: 9.0.0.CR1 > > > The following needs reviewing across AS7: - > - On demand instantiation of PrivilegedActions where singletons would suffice (Consider frequency of calls, gc may be preferable). > - Use of AccessController even though there is no SecurityManager set. > - Code duplication, in every case I have seen so far the code is the same regardless of if PRIVILEGED or NON_PRIVILEGED > - Utility methods with visibility too high. > - In depth review of the other methods, i.e. if the first thing a public method does is set the class loader based on a parameter passed in it could be used badly - it may even be a justification for that method to NOT use a PrivilegedAction. > - Code that requires to be executed using a PrivilegedAction should also be double checked that it is not doing too much as the identity of the caller. -- This message was sent by Atlassian JIRA (v6.3.11#6341)

11 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFLY-441) If possible, eliminate the NonTxEmCloser by closing the EM immediately after each EM invocation

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-441?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-441: ------------------------------ Fix Version/s: 9.0.0.CR1 (was: 9.0.0.Beta1) > If possible, eliminate the NonTxEmCloser by closing the EM immediately after each EM invocation > ----------------------------------------------------------------------------------------------- > > Key: WFLY-441 > URL: https://issues.jboss.org/browse/WFLY-441 > Project: WildFly > Issue Type: Task > Components: JPA / Hibernate > Reporter: Scott Marlow > Priority: Minor > Fix For: 9.0.0.CR1 > > > For Queries, handoff the EntityManager to a Query object wrapper and have the Query object finalizer close the EntityManager. > Make sure that we respect JPA 2.0 section 3.8.6 (detach objects returned from Query object). > 1. Methods that return a Query, will hand off the EM to the Query object wrapper. > 2. Other methods will close the EM at the end of the EM method invocation. > When making this change, make sure that performance doesn't degrade. The cost of this change, will be that each (transaction scoped non-tx) EM invocation will create a new persistence context, but we can eliminate the NonTxEmCloser which has its own overhead. -- This message was sent by Atlassian JIRA (v6.3.11#6341)

11 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFLY-431) Revisit enforcement of required file system permissions.

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-431?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-431: ------------------------------ Fix Version/s: 9.0.0.CR1 (was: 9.0.0.Beta1) > Revisit enforcement of required file system permissions. > -------------------------------------------------------- > > Key: WFLY-431 > URL: https://issues.jboss.org/browse/WFLY-431 > Project: WildFly > Issue Type: Task > Components: Domain Management > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Labels: management_security, > Fix For: 9.0.0.CR1 > > > Now that AS8 has moved to Java 7 we can re-visit the level of control we have over file system permissions, this can be from taking more control of the local authentication mechanism to ensure incorrect permissions are not inherited to verifying sensitive configuration files are not world readable. -- This message was sent by Atlassian JIRA (v6.3.11#6341)

11 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFLY-421) Domain Mode JMX access through the HostController

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-421?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-421: ------------------------------ Fix Version/s: 9.0.0.CR1 (was: 9.0.0.Beta1) > Domain Mode JMX access through the HostController > ------------------------------------------------- > > Key: WFLY-421 > URL: https://issues.jboss.org/browse/WFLY-421 > Project: WildFly > Issue Type: Task > Components: JMX, Remoting > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Labels: JMX, investigation_required > Fix For: 9.0.0.CR1 > > > This task is first to review if this should be considered. > At the moment access to JMX is provided through the remoting connector of each AS instance - this task is to consider if we should actually make it available through the host controller with the host controller acting as a proxy. > The main motivation being to separate management and app traffic. -- This message was sent by Atlassian JIRA (v6.3.11#6341)

11 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFLY-418) TS: Move resources to source packages.

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-418?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-418: ------------------------------ Fix Version/s: 9.0.0.CR1 (was: 9.0.0.Beta1) > TS: Move resources to source packages. > -------------------------------------- > > Key: WFLY-418 > URL: https://issues.jboss.org/browse/WFLY-418 > Project: WildFly > Issue Type: Task > Components: Test Suite > Reporter: Ondrej Zizka > Assignee: Ondrej Zizka > Priority: Minor > Fix For: 9.0.0.CR1 > > -- This message was sent by Atlassian JIRA (v6.3.11#6341)

11 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFLY-447) Connection Reauthentication and Security Propagation

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-447?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-447: ------------------------------ Fix Version/s: 9.0.0.CR1 (was: 9.0.0.Beta1) > Connection Reauthentication and Security Propagation > ---------------------------------------------------- > > Key: WFLY-447 > URL: https://issues.jboss.org/browse/WFLY-447 > Project: WildFly > Issue Type: Task > Components: EJB, Remoting, Security > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Labels: authentication_service > Fix For: 9.0.0.CR1 > > > This task is a top level task to coordinate the addition of support for switching to different security identities on an existing connection over Remoting. > This is to predominantly cover two major scenarios: - > - Clients using a single connection but require different calls to be executed as different users, in this case the client has the information required to start a new authentication as a different user. > - Server to server communication where the first server has already authenticated a remote user - for this scenario the first server needs a way to tell the second server what identity to run the call as. > The following document is building up the requirements and design considerations and decisions: - > https://community.jboss.org/wiki/ConnectionRe-AuthenticationAndSecurityPr... -- This message was sent by Atlassian JIRA (v6.3.11#6341)

11 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFLY-444) Remove ServerEnvironment.getModulesDir()

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-444?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-444: ------------------------------ Fix Version/s: 9.0.0.CR1 (was: 9.0.0.Beta1) > Remove ServerEnvironment.getModulesDir() > ---------------------------------------- > > Key: WFLY-444 > URL: https://issues.jboss.org/browse/WFLY-444 > Project: WildFly > Issue Type: Task > Components: Server > Reporter: Brian Stansberry > Assignee: Brian Stansberry > Fix For: 9.0.0.CR1 > > > This method was deprecated in 7.1.0 and the OSGi subsystem is removing the only known use of it in 7.1.2. Remove the method in 7.2. -- This message was sent by Atlassian JIRA (v6.3.11#6341)

11 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFLY-443) Add integration test of Seam2 integration

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-443?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-443: ------------------------------ Fix Version/s: 9.0.0.CR1 (was: 9.0.0.Beta1) > Add integration test of Seam2 integration > ----------------------------------------- > > Key: WFLY-443 > URL: https://issues.jboss.org/browse/WFLY-443 > Project: WildFly > Issue Type: Task > Components: Test Suite > Environment: https://github.com/jbossas/jboss-as/commit/b036d103ed503b0099d3f62c1c50f9... will break the Seam 2 integration since Seam2Processor will look for the specific jar name. Yet the commit did not result in any testsuite failure. So, it seems we have no integration testing. > Reporter: Brian Stansberry > Fix For: 9.0.0.CR1 > > -- This message was sent by Atlassian JIRA (v6.3.11#6341)

11 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFLY-459) correct JPA dependency injection (stop injecting javassist)

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-459?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-459: ------------------------------ Fix Version/s: 9.0.0.CR1 (was: 9.0.0.Beta1) > correct JPA dependency injection (stop injecting javassist) > ----------------------------------------------------------- > > Key: WFLY-459 > URL: https://issues.jboss.org/browse/WFLY-459 > Project: WildFly > Issue Type: Task > Components: JPA / Hibernate > Reporter: Scott Marlow > Assignee: Scott Marlow > Fix For: 9.0.0.CR1 > > > Rather than export the javassist dependency, see if we can change javassist to generate proxies for the application classes which aren't on the hibernate module class path. -- This message was sent by Atlassian JIRA (v6.3.11#6341)

11 years, 1 month

1
0
0 / 0

[JBoss JIRA] (WFLY-463) Add utility for creating and destorying modules in tests

by Jason Greene (JIRA)

[ https://issues.jboss.org/browse/WFLY-463?page=com.atlassian.jira.plugin.s... ] Jason Greene updated WFLY-463: ------------------------------ Fix Version/s: 9.0.0.CR1 (was: 9.0.0.Beta1) > Add utility for creating and destorying modules in tests > -------------------------------------------------------- > > Key: WFLY-463 > URL: https://issues.jboss.org/browse/WFLY-463 > Project: WildFly > Issue Type: Task > Components: Test Suite > Reporter: Stuart Douglas > Assignee: Ondrej Zizka > Fix For: 9.0.0.CR1 > > > Lots of tests create and destroy a static module to test functionaility involving static modules. If possible all this code should be moved into some kind of static module builder utility. -- This message was sent by Atlassian JIRA (v6.3.11#6341)

11 years, 1 month

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira March 2015