[JBoss JIRA] (ELY-609) Unguarded read in ElytronPolicyConfiguration
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/ELY-609?page=com.atlassian.jira.plugin.sy... ]
Darran Lofthouse reassigned ELY-609:
------------------------------------
Assignee: (was: Darran Lofthouse)
> Unguarded read in ElytronPolicyConfiguration
> --------------------------------------------
>
> Key: ELY-609
> URL: https://issues.jboss.org/browse/ELY-609
> Project: WildFly Elytron
> Issue Type: Bug
> Affects Versions: 1.1.0.Beta7
> Reporter: Ondrej Lukas
> Labels: static_analysis
> Fix For: 1.2.0.Beta1
>
>
> Access to fields {{uncheckedPermissions}}, {{excludedPermissions}} and {{rolePermissions}} in {{org.wildfly.security.authz.jacc.ElytronPolicyConfiguration}} is holded by lock. However lock is not used in their getter methods. Getters should be also handled by locks to avoid unguarded read of those fields.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 8 months
[JBoss JIRA] (ELY-735) Remove PeerIdentity bundling from SecurityIdentity
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/ELY-735?page=com.atlassian.jira.plugin.sy... ]
Darran Lofthouse reassigned ELY-735:
------------------------------------
Assignee: (was: David Lloyd)
> Remove PeerIdentity bundling from SecurityIdentity
> --------------------------------------------------
>
> Key: ELY-735
> URL: https://issues.jboss.org/browse/ELY-735
> Project: WildFly Elytron
> Issue Type: Task
> Components: API / SPI
> Reporter: David Lloyd
>
> The primary use case of the PeerIdentitys-inside-SecurityIdentity bundling capability is bundling a Subject with the SI. But, the PI mechanism can't encompass Subject because of the way Subject.doAs works versus PI's pre/postAssociate mechanism.
> If we do need the Subject bundling capability, we should just add a Subject field to SI and a method to create a bundled SI.
> SI is in fact more closely aligned with an "SI is-a PI" arrangement, which we might or might not want to pursue later.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 8 months