[JBoss JIRA] (WFLY-9040) EJB with Elytron propagate identity even when it should not
by Jan Kalina (JIRA)
Jan Kalina created WFLY-9040:
--------------------------------
Summary: EJB with Elytron propagate identity even when it should not
Key: WFLY-9040
URL: https://issues.jboss.org/browse/WFLY-9040
Project: WildFly
Issue Type: Bug
Components: Security
Affects Versions: 11.0.0.Alpha1
Reporter: Jan Kalina
Assignee: Jan Kalina
Priority: Blocker
In *testSingletonPostconstructSecurityNotPropagating*, when Elytron enabled, identity (including Admin role) is propagated into *StatelessBBean*:
{code}
StatelessSingletonUseBean
SimpleSingletonBean
| check Admin in [Admin] (has required role)
StatelessBBean
{code}
In non-Elytron case the check is unsuccessful as test require, because identity is not propagated:
{code}
StatelessSingletonUseBean
SimpleSingletonBean
| authorize
EXCEPTION
methodRoles = Admin
securityContext.subjectInfo = anonymouse
{code}
This is lack of WFLY-981 in Elytron:
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 5 months
[JBoss JIRA] (WFLY-9039) EJB with Elytron propagate identity even when it should not
by Jan Kalina (JIRA)
[ https://issues.jboss.org/browse/WFLY-9039?page=com.atlassian.jira.plugin.... ]
Jan Kalina updated WFLY-9039:
-----------------------------
Description:
In *testSingletonPostconstructSecurityNotPropagating*, when Elytron enabled, identity (including Admin role) is propagated into *StatelessBBean*:
{code}
StatelessSingletonUseBean
SimpleSingletonBean
| check Admin in [Admin] (has required role)
StatelessBBean
{code}
In non-Elytron case the check is unsuccessful as test require, because identity is not propagated:
{code}
StatelessSingletonUseBean
SimpleSingletonBean
| authorize
EXCEPTION
methodRoles = Admin
securityContext.subjectInfo = anonymouse
{code}
This is lack of WFLY-981 in Elytron:
was:
In *testSingletonPostconstructSecurityNotPropagating*, when Elytron enabled, identity (including Admin role) is propagated into *StatelessBBean*:
{code}
StatelessSingletonUseBean
SimpleSingletonBean
| check Admin in [Admin] (has required role)
StatelessBBean
{code}
In non-Elytron case the check is unsuccessful, as test require, because identity is not propagated:
{code}
StatelessSingletonUseBean
SimpleSingletonBean
| authorize
EXCEPTION
methodRoles = Admin
securityContext.subjectInfo = anonymouse
{code}
> EJB with Elytron propagate identity even when it should not
> -----------------------------------------------------------
>
> Key: WFLY-9039
> URL: https://issues.jboss.org/browse/WFLY-9039
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 11.0.0.Alpha1
> Reporter: Jan Kalina
> Assignee: Jan Kalina
> Priority: Blocker
>
> In *testSingletonPostconstructSecurityNotPropagating*, when Elytron enabled, identity (including Admin role) is propagated into *StatelessBBean*:
> {code}
> StatelessSingletonUseBean
> SimpleSingletonBean
> | check Admin in [Admin] (has required role)
> StatelessBBean
> {code}
> In non-Elytron case the check is unsuccessful as test require, because identity is not propagated:
> {code}
> StatelessSingletonUseBean
> SimpleSingletonBean
> | authorize
> EXCEPTION
> methodRoles = Admin
> securityContext.subjectInfo = anonymouse
> {code}
> This is lack of WFLY-981 in Elytron:
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 5 months
[JBoss JIRA] (WFLY-9039) EJB with Elytron propagate identity even when it should not
by Jan Kalina (JIRA)
Jan Kalina created WFLY-9039:
--------------------------------
Summary: EJB with Elytron propagate identity even when it should not
Key: WFLY-9039
URL: https://issues.jboss.org/browse/WFLY-9039
Project: WildFly
Issue Type: Bug
Components: Security
Affects Versions: 11.0.0.Alpha1
Reporter: Jan Kalina
Assignee: Jan Kalina
Priority: Blocker
In *testSingletonPostconstructSecurityNotPropagating*, when Elytron enabled, identity (including Admin role) is propagated into *StatelessBBean*:
{code}
StatelessSingletonUseBean
SimpleSingletonBean
| check Admin in [Admin] (has required role)
StatelessBBean
{code}
In non-Elytron case the check is unsuccessful, as test require, because identity is not propagated:
{code}
StatelessSingletonUseBean
SimpleSingletonBean
| authorize
EXCEPTION
methodRoles = Admin
securityContext.subjectInfo = anonymouse
{code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 5 months
[JBoss JIRA] (WFLY-9038) Cluster topology updates are lossy
by Paul Ferraro (JIRA)
Paul Ferraro created WFLY-9038:
----------------------------------
Summary: Cluster topology updates are lossy
Key: WFLY-9038
URL: https://issues.jboss.org/browse/WFLY-9038
Project: WildFly
Issue Type: Bug
Components: Clustering
Reporter: Paul Ferraro
Assignee: Paul Ferraro
Priority: Blocker
Fix For: 11.0.0.Beta1
EJB code is not getting a complete cluster topology.
In AssociationImpl, we register cluster topology listeners by adding a {{RegistryCollector.Listener<String, List<ClientMapping>>}}. Because this listener will only receive updates relative to the time it was registered, we also iterate all the values of the original {{RegistryCollector<String, List<ClientMapping>>}} by using its {{getRegistries()}} method at this time.
However, this iteration always seems to come up empty, or else we're missing notifications some other way. So we end up with an incomplete cluster view and client invocations fail because of a perceived lack of node availability.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 6 months
[JBoss JIRA] (DROOLS-1551) Implement FEEL/DMN value marshaller
by Edson Tirelli (JIRA)
[ https://issues.jboss.org/browse/DROOLS-1551?page=com.atlassian.jira.plugi... ]
Edson Tirelli updated DROOLS-1551:
----------------------------------
Sprint: 2017 Week 26-27
> Implement FEEL/DMN value marshaller
> -----------------------------------
>
> Key: DROOLS-1551
> URL: https://issues.jboss.org/browse/DROOLS-1551
> Project: Drools
> Issue Type: Feature Request
> Components: dmn engine
> Affects Versions: 7.0.0.CR3
> Reporter: Edson Tirelli
> Assignee: Edson Tirelli
> Priority: Critical
>
> Some value types in FEEL/DMN require special formatting when marshalling/unmarshalling. For instance:
> {quote}
> So it seems that ISO 8601 does not define negative intervals. I.e., ISO 8601 only supports things like "PT1H". XPath extends that with a leading optional sign, like "+PT1H" and "-PT1H". Java extends that allowing the sign to be used in each of the units in the duration like, "PT+1H", "PT-1H", besides the leading sign "-PT1H".
> The FEEL spec on page 113 seems to follow the XPath lexical definition, so the leading sign "-PT1H" seems to be the correct format.
> {quote}
> Implement an object marshaller for DMN/FEEL that is capable of marshalling/unmarshalling objects. Most object types are straightforward, but a few of them (like durations) need special handling. In particular:
> * negative duration should use a leading - sign instead of having the sign in the unit numbers
> * durations need to be normalized before marshalled:
> {quote}
> A days and time duration in the semantic domain is a sequence of numbers for the days, hours, minutes, and seconds of duration, normalized such that the sum of these numbers is minimized.
> {quote}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 6 months