[jboss-jira] [JBoss JIRA] (AS7-4687) Review the use of InheritableThreadLocal in SecurityContextAssociation
[
https://issues.jboss.org/browse/AS7-4687?page=com.atlassian.jira.plugin.s...
]
Stuart Douglas commented on AS7-4687:
-------------------------------------
There is a config option to change it to a ThreadLocal, but it is disabled by default.
Just changing the default would probably be sufficient.
I am not sure what the broader impact of this change would be though.
Review the use of InheritableThreadLocal in
SecurityContextAssociation
----------------------------------------------------------------------
Key: AS7-4687
URL: https://issues.jboss.org/browse/AS7-4687
Project: Application Server 7
Issue Type: Task
Components: Security
Reporter: Stuart Douglas
Assignee: Stefan Guilhen
There have been problems with the SecurityContext leaking into thread pools, due to the
use of the InheritableThreadLocal.
Do we still need this to be an InheritableThreadLocal? If so, is there anything we can do
to stop it from leaking into thread pools?
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira