]
Farah Juma updated WFLY-8956:
-----------------------------
Summary: MissingMethodPermissionsDefaultAllowedTestCase and
MissingMethodPermissionsTestCase fail when run with the Elytron profile enabled (was:
EJB3 subsystem default security domain is not propagated to secured EJBs without
@SecurityDomain annotation if the default security domain is Elytron)
MissingMethodPermissionsDefaultAllowedTestCase and
MissingMethodPermissionsTestCase fail when run with the Elytron profile enabled
----------------------------------------------------------------------------------------------------------------------------------
Key: WFLY-8956
URL:
https://issues.jboss.org/browse/WFLY-8956
Project: WildFly
Issue Type: Bug
Components: EJB, Security
Reporter: Farah Juma
Assignee: Farah Juma
Priority: Critical
Suppose a deployment with EJB with security related annotations (for example
{{@RolesAllowed}}) but without a {{@SecurityDomain}} annotation. If the EAP running the
deployment has attribute {{default-security-domain}} in {{/subsystem=ejb3}} defined, this
will be used for any bean without security domain used in deployment. This works with
PicketBox domains, however, if an Elytron security domain is defined as default, no such
domain will be associated with the deployment.
This also causes failure of
{{org.jboss.as.test.integration.ejb.security.missingmethodpermission.*TestCase}} tests in
integration/basic module in test suite.