JACC delegetation for unprotected web resources is not working anymore. ----------------------------------------------------------------------- Key: SECURITY-367 URL: https://jira.jboss.org/jira/browse/SECURITY-367 Project: JBoss Security and Identity Management Issue Type: Bug Security Level: Public (Everyone can see) Components: JBossSX Environment: JBOSS 4.2.3 GA for JDK 1.6 (I don't know which security version is included), jdk 1.6, SunOS 5.11 snv_79a, x86_64 hardware. Reporter: Karel Gardas Assignee: Anil Saldhana I'm testing JACC delegation to unprotected web resources feature which was added to JBoss based on this feature request: https://jira.jboss.org/jira/browse/JBAS-2519 but it seems the feature is not working any more. I'm judging based on my debug messages added to the JaccAuthorizationRealm class. If I don't use the feature and if the test web resource is protected, then my JACC gets called well. If it is unprotected and although delegation is switched on, my JACC is not called nor any delegation related method in JaccAuthorizationReal class (getSecurityConstraintsFromProvider) -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira