EJB1.1 isCallerInRole throws RTE if role is not found in deployment descriptor ------------------------------------------------------------------------------ Key: JBAS-6131 URL: https://jira.jboss.org/jira/browse/JBAS-6131 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: EJB2, Security Affects Versions: JBossAS-5.0.0.CR2 Reporter: Anil Saldhana Assignee: Anil Saldhana Priority: Minor Fix For: JBossAS-5.0.0.GA jboss.xml has an "enforce-ejb-restrictions" flag. This can be used to ensure that a RTE is thrown for isCallerInRole checks for roles that do not exist in the DD. Security 2.0.2.CR9 post releases contain ejbResource.setEJBRestrictions flag which when set will make the enforcement happen. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira