JACC layer should generate unchecked permissions for methods with no security annotations
-----------------------------------------------------------------------------------------
Key: EJBTHREE-755
URL:
http://jira.jboss.com/jira/browse/EJBTHREE-755
Project: EJB 3.0
Issue Type: Bug
Reporter: Anil Saldhana
Assigned To: Anil Saldhana
Consider the following usecases:
1) There are @RolesAllowed annotations on multiple methods(set X). Some methods (set Y) do
not have @RolesAllowed, @PermitAll, @DenyAll annotations. For these methods in set Y,
unchecked permissions need to be created for the roles for the ejb3 app.
2) There is a @DeclareRoles annotation at the class level. Methods may define annotations
(set x) as in usecase 1. For the methods with missing security annotations, create
unchecked permissions.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira