[ http://jira.jboss.com/jira/browse/JBMESSAGING-824?page=comments#action_12... ] Ovidiu Feodorov commented on JBMESSAGING-824: --------------------------------------------- Caused by the previous "fix" to http://jira.jboss.org/jira/browse/JBMESSAGING-807. Not placing SecurityContext on thread local compromises authorization process when sending a message. The functional test suite was not complete enough to catch this. I added org.jboss.test.thirdparty.jbosssx.SecurityAssociationTest.testAuthorizedSend() -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ http://jira.jboss.com/jira/browse/JBMESSAGING-824?page=comments#action_12... ] Ovidiu Feodorov commented on JBMESSAGING-824: --------------------------------------------- JaasSecurityManager doesUserHaveRole() method ignores the principal passed as argument and looks at thread local for security information, while MockSecurityManager uses it. This is why functional test suite passed and the smoke test failed. Fixed the code and also added extra test to catch these kind of things earlier than the smoke tests. org.jboss.test.thirdparty.jbosssx.SecurityAssociationTest.testGuestAuthorizedSend() org.jboss.test.thirdparty.jbosssx.SecurityAssociationTest.testAuthorizedSend() -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira