[jboss-jira] [JBoss JIRA] Resolved: (JBWEB-19) Make isUserInRole() and getUserPrincipal() available on unsecured pages
[
https://jira.jboss.org/jira/browse/JBWEB-19?page=com.atlassian.jira.plugi...
]
Remy Maucherat resolved JBWEB-19.
---------------------------------
Fix Version/s: (was: JBossWeb-2.1.7.GA)
Resolution: Rejected
EE 6 has not required this, so I am rejecting this JIRA. Unless there is a security
constraint (which can require "any authenticated user"), these fields do not
have to be populated.
Make isUserInRole() and getUserPrincipal() available on unsecured
pages
-----------------------------------------------------------------------
Key: JBWEB-19
URL: https://jira.jboss.org/jira/browse/JBWEB-19
Project: JBoss Web
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Core
Environment: Any
Reporter: Jeff Schnitzer
Assignee: Remy Maucherat
Currently getUserPrincipal() returns null and ServletRequest.isUserInRole() always
returns false on unsecured pages, even after the user has been authenticated.
It would be much more useful if these always returned proper values. This confusion
comes up on the JAAS forums frequently.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira