AuthConfigFactory.getFactory() checking wrong permission. --------------------------------------------------------- Key: JBEE-190 URL: https://issues.redhat.com/browse/JBEE-190 Project: JBoss Enterprise Spec APIs Issue Type: Bug Components: jboss-jaspi-api Reporter: Darran Lofthouse Assignee: Darran Lofthouse Priority: Major Fix For: jboss-jaspi-api_spec-1.0.3.CR1 The method currently performs the following check: - {code:java} //Validate the caller permission SecurityManager sm = System.getSecurityManager(); if (sm != null) sm.checkPermission(new SecurityPermission("getFactory")); {code} However it is supposed to be using 'getFactorySecurityPermission'.