[ https://jira.jboss.org/jira/browse/EJBTHREE-1945?page=com.atlassian.jira.... ] Anton Kolmakov updated EJBTHREE-1945: ------------------------------------- Description: I have one message driven bean A and two stateless beans B and C. A annotated with @RunAs, @RunAsPrincipal and @SecurityDomain. B and C annotated with @SecurityDomain. A receives message and calls B which calls C. RunAsIdentity is propagated to B only but not to C. Why? Is it expected behavior? I expect propagation of RunAsIdentity to all beans in execution chain after bean with @RunAsPrincipal annotation. was: I have one message driven bean A and two stateless beans B and C. A annotated with @RunAs, @RunAsPrincipal and @SecurityDomain. B and C annotated with @SecurityDomain. A receives message and calls B which calls C. RunAsPrincipal is propagated to B only but not to C. Why? Is it expected behavior? I expect propagation of RunAsPrinciapl to all beans in execution chain after bean with @RunAsPrincipal annotation. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/jira/browse/EJBTHREE-1945?page=com.atlassian.jira.... ] jaikiran pai reassigned EJBTHREE-1945: -------------------------------------- Assignee: jaikiran pai -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/browse/EJBTHREE-1945?page=com.atlassian.jira.plugi... ] Carlo de Wolf reassigned EJBTHREE-1945: --------------------------------------- Assignee: Carlo de Wolf (was: jaikiran pai) -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/browse/EJBTHREE-1945?page=com.atlassian.jira.plugi... ] Pappy STANESCU updated EJBTHREE-1945: ------------------------------------- Attachment: EJBTHREE-1945.zip Hi Here is a small application covering three cases - invocation from a MDB annotated with @RunAs - invocation from a Servlet annotated with @RunAs - invocation from a servlet with authentication Only the third works, the first two fail with "Caller Unauthorized". The deployable artefacts are in the deploy/ directory of the archive -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/browse/EJBTHREE-1945?page=com.atlassian.jira.plugi... ] Anton Kolmakov reopened EJBTHREE-1945: -------------------------------------- I'm reopening this issue because we have an application which reproduces the problem. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://issues.jboss.org/browse/EJBTHREE-1945?page=com.atlassian.jira.plu... ] Anton Kolmakov commented on EJBTHREE-1945: ------------------------------------------ Workaround: public class JBossRunAsController { private static <T> T doAs(RunAsAction<T> action, String username, String password) { SecurityClient securityClient = getExceptionSafeSecurityClient(); securityClient.setSimple(username, password); try { securityClient.login(); } catch (LoginException ex) { throw new RuntimeException(ex); } try { return action.run(); } finally { securityClient.logout(); } } private static SecurityClient getExceptionSafeSecurityClient() { try { return SecurityClientFactory.getSecurityClient(); } catch (Exception ex) { throw new RuntimeException("Failed to get jboss security client: " + ex.getMessage(), ex); } } } MDB { onMessage { JBossRunAsController.doAs(new RunAsAction<Object>() { public Object run() { code executed under "username" } }, "username", "password"); } } -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira