]
Anil Saldhana closed EJBTHREE-755.
----------------------------------
Resolution: Done
JACC layer should generate unchecked permissions for methods with no
security annotations
-----------------------------------------------------------------------------------------
Key: EJBTHREE-755
URL:
http://jira.jboss.com/jira/browse/EJBTHREE-755
Project: EJB 3.0
Issue Type: Bug
Components: Security
Affects Versions: EJB 3.0 RC9 - FD
Reporter: Anil Saldhana
Assigned To: Anil Saldhana
Fix For: EJB 3.0 RC10 - FD
Consider the following usecases:
1) There are @RolesAllowed annotations on multiple methods(set X). Some methods (set Y)
do not have @RolesAllowed, @PermitAll, @DenyAll annotations. For these methods in set Y,
unchecked permissions need to be created for the roles for the ejb3 app.
2) There is a @DeclareRoles annotation at the class level. Methods may define annotations
(set x) as in usecase 1. For the methods with missing security annotations, create
unchecked permissions.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: