[jboss-jira] [Red Hat JIRA] (JBEE-190) AuthConfigFactory.getFactory() checking wrong permission.
[
https://issues.redhat.com/browse/JBEE-190?page=com.atlassian.jira.plugin....
]
Darran Lofthouse resolved JBEE-190.
-----------------------------------
Fix Version/s: jboss-jaspi-api_spec-1.0.3.CR1
Resolution: Done
AuthConfigFactory.getFactory() checking wrong permission.
---------------------------------------------------------
Key: JBEE-190
URL: https://issues.redhat.com/browse/JBEE-190
Project: JBoss Enterprise Spec APIs
Issue Type: Bug
Components: jboss-jaspi-api
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Priority: Major
Fix For: jboss-jaspi-api_spec-1.0.3.CR1
The method currently performs the following check: -
{code:java}
//Validate the caller permission
SecurityManager sm = System.getSecurityManager();
if (sm != null)
sm.checkPermission(new SecurityPermission("getFactory"));
{code}
However it is supposed to be using 'getFactorySecurityPermission'.
--
This message was sent by Atlassian Jira
(v8.13.1#813001)