[ https://jira.jboss.org/jira/browse/SECURITY-490?page=com.atlassian.jira.p... ] Anil Saldhana updated SECURITY-490: ----------------------------------- Summary: JBossAuthorizationManager->JBossAuthorizationContext.authorize call has an unnecessary lock (was: JBossAuthorizationManager-<JBossAuthorizationContext.authorize call has an unnecessary lock) -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/jira/browse/SECURITY-490?page=com.atlassian.jira.p... ] Anil Saldhana reopened SECURITY-490: ------------------------------------ We have synchronization issues mainly with the module list and control flag list in the authorization context. After each authorization, the modules/control flags are currently being emptied. This is with regard to the memory leak in JBossAuthorizationContext (SECURITY-442). I think we need to bring in a counter concept. If there are currently zero users of the authorization concept, then clear the modules/control flag. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/jira/browse/SECURITY-490?page=com.atlassian.jira.p... ] Anil Saldhana closed SECURITY-490. ---------------------------------- Resolution: Done ================= anil@localhost:~/security/security-jboss-sx/branches/Branch_2_0/jbosssx/src/main/java/org/jboss/security/plugins$ svn ci -m "SECURITY-490: remove the lock in JBossAuthorizationManager authorize method and introduce a counter in JBossAuthorizatioNContext that takes care of number of authorizations in use and when the counter is 0, clears the modules and control flag lists" Sending plugins/JBossAuthorizationManager.java Sending plugins/authorization/JBossAuthorizationContext.java Transmitting file data .. Committed revision 103483. ========================================== PicketBox: ==================== anil@localhost:~/picketbox/trunk$ svn ci -m "SECURITY-490: remove the lock in JBossAuthorizationManager authorize method and introduce a counter in JBossAuthorizatioNContext that takes care of number of authorizations in use and when the counter is 0, clears the modules and control flag lists" Sending security-jboss-sx/jbosssx/src/main/java/org/jboss/security/plugins/JBossAuthorizationManager.java Sending security-jboss-sx/jbosssx/src/main/java/org/jboss/security/plugins/authorization/JBossAuthorizationContext.java Transmitting file data .. Committed revision 72. ======================== -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/jira/browse/SECURITY-490?page=com.atlassian.jira.p... ] Anil Saldhana commented on SECURITY-490: ---------------------------------------- Continue discussion here: http://community.jboss.org/thread/150262 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira