[jboss-jira] [JBoss JIRA] Updated: (JBWEB-134) AuthenticatorBase calls hasResourcePermission when authentication not performed

AuthenticatorBase calls hasResourcePermission when authentication not performed ------------------------------------------------------------------------------- Key: JBWEB-134 URL: https://jira.jboss.org/jira/browse/JBWEB-134 Project: JBoss Web Issue Type: Bug Security Level: Public(Everyone can see) Components: Tomcat Affects Versions: JBossWeb-2.1.1.GA Reporter: Anil Saldhana Assignee: Jean-Frederic Clere Priority: Critical http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/authen... Line 507. The check to hasResourcePermissionCheck should not happen if the local variable authRequired is false.