[jboss-user] [Security & JAAS/JBoss] - Re: Concurrency bug in JaasSecurityManager
It doesn't perform deep copy of Subjects, so the copied subject shares its role
collection with the original subject.
Deep copy is controlled by the flag which is never set to 'true':
| /** The flag to indicate that the Subject sets need to be deep copied*/
| private boolean deepCopySubjectOption = false;
|
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992479#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...