December 2009 - jbossws-issues - Jboss List Archives

[JBoss JIRA] Created: (JBWS-2820) NullPointer Exception in Metro Stack when user has insufficent permissions to call a webservice method

by KickMeToAndy (JIRA)

NullPointer Exception in Metro Stack when user has insufficent permissions to call a webservice method ------------------------------------------------------------------------------------------------------ Key: JBWS-2820 URL: https://jira.jboss.org/jira/browse/JBWS-2820 Project: JBoss Web Services Issue Type: Bug Security Level: Public (Everyone can see) Components: jbossws-metro Affects Versions: jbossws-metro-3.1.1 Environment: Windows Vista JBoss 4.2.3.GA JBossWS Metro 3.1.1 Reporter: KickMeToAndy Hello, we have a webservice that is protected via a custom LoginModule. To protect the individual Methods we use the annotation @RolesAllowed. Now if we call a webservice for which a user has insufficient privileges we get the following exception 18:07:42,608 ERROR [http-127.0.0.1-9080-1] [RoleBasedAuthorizationInterceptor] Insufficient permissions, principal=blubb, requiredRoles=[someRole], principalRol es=[nochwas, rechnungsempfaengerLesen] 07:54:33,863 ERROR [http-127.0.0.1-9080-1] [EndpointMethodHandler] java.lang.NullPointerException at org.jboss.wsf.stack.metro.InvokerEJB3.handleException(InvokerEJB3.java:127) at org.jboss.wsf.stack.metro.InvokerEJB3.invoke(InvokerEJB3.java:106) at com.sun.xml.ws.server.InvokerTube$2.invoke(InvokerTube.java:146) at com.sun.xml.ws.server.sei.EndpointMethodHandler.invoke(EndpointMethodHandler.java:257) at com.sun.xml.ws.server.sei.SEIInvokerTube.processRequest(SEIInvokerTube.java:93) at com.sun.xml.ws.api.pipe.Fiber.__doRun(Fiber.java:598) at com.sun.xml.ws.api.pipe.Fiber._doRun(Fiber.java:557) at com.sun.xml.ws.api.pipe.Fiber.doRun(Fiber.java:542) at com.sun.xml.ws.api.pipe.Fiber.runSync(Fiber.java:439) at com.sun.xml.ws.api.pipe.helper.AbstractTubeImpl.process(AbstractTubeImpl.java:112) at org.jboss.wsf.stack.metro.log.DumpPipe.process(DumpPipe.java:94) at com.sun.xml.ws.api.pipe.helper.PipeAdapter.processRequest(PipeAdapter.java:115) at com.sun.xml.ws.api.pipe.Fiber.__doRun(Fiber.java:598) at com.sun.xml.ws.api.pipe.Fiber._doRun(Fiber.java:557) at com.sun.xml.ws.api.pipe.Fiber.doRun(Fiber.java:542) at com.sun.xml.ws.api.pipe.Fiber.runSync(Fiber.java:439) at com.sun.xml.ws.server.WSEndpointImpl$2.process(WSEndpointImpl.java:243) at com.sun.xml.ws.transport.http.HttpAdapter$HttpToolkit.handle(HttpAdapter.java:444) at com.sun.xml.ws.transport.http.HttpAdapter.handle(HttpAdapter.java:244) at com.sun.xml.ws.transport.http.servlet.ServletAdapter.handle(ServletAdapter.java:135) at org.jboss.wsf.stack.metro.RequestHandlerImpl.doPost(RequestHandlerImpl.java:225) at org.jboss.wsf.stack.metro.RequestHandlerImpl.handleHttpRequest(RequestHandlerImpl.java:82) at org.jboss.wsf.common.servlet.AbstractEndpointServlet.service(AbstractEndpointServlet.java:85) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175) at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:182) at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:157) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:262) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:446) at java.lang.Thread.run(Unknown Source) I have debugged the problem and the problems is the following: The problem is the following method in the InvokerEJB3 class of the jbossws metro stack: private void handleException(Exception ex) throws InvocationTargetException, IllegalAccessException { //Unwrap EJBException if (ex instanceof EJBException) ex = ((EJBException)ex).getCausedByException(); ..... } The ex variable that gets passed into the method is a javax.ejb.EJBAccessException (with the message "Authorization failure"). The problem is that the expression > ((EJBException)ex).getCausedByException() returns null for the exception, becuase it does not have a causeException! later in the method the call > if (ex.getClass().isAnnotationPresent(WebFault.class)) results in a nullpointer exception, because ex is null (because there was no root cause). At the moment the method always expects a cause Exception if the exception passed to the method is a EJBException! cheers, andy -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 12 months

5
9
0 / 0

[JBoss JIRA] Created: (JBWS-2867) JBossWS Metro 3.2.2.GA Errata

by Richard Opalka (JIRA)

JBossWS Metro 3.2.2.GA Errata ------------------------------ Key: JBWS-2867 URL: https://jira.jboss.org/jira/browse/JBWS-2867 Project: JBoss Web Services Issue Type: Sub-task Security Level: Public (Everyone can see) Components: productization Reporter: Richard Opalka Assignee: Richard Opalka Fix For: jbossws-metro-3.2.2 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 12 months

1
1
0 / 0

[JBoss JIRA] Created: (JBWS-2866) JBossWS CXF 3.2.2.GA Errata

by Richard Opalka (JIRA)

JBossWS CXF 3.2.2.GA Errata ---------------------------- Key: JBWS-2866 URL: https://jira.jboss.org/jira/browse/JBWS-2866 Project: JBoss Web Services Issue Type: Sub-task Security Level: Public (Everyone can see) Components: productization Reporter: Richard Opalka Assignee: Richard Opalka Fix For: jbossws-cxf-3.2.2 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 12 months

1
1
0 / 0

[JBoss JIRA] Created: (JBWS-2869) Pass JavaEE 5 CTS (jaxr, jaxrpc, jaxws, jws, saaj, webservices, webservices12 modules)

by Richard Opalka (JIRA)

Pass JavaEE 5 CTS (jaxr, jaxrpc, jaxws, jws, saaj, webservices, webservices12 modules) -------------------------------------------------------------------------------------- Key: JBWS-2869 URL: https://jira.jboss.org/jira/browse/JBWS-2869 Project: JBoss Web Services Issue Type: Sub-task Security Level: Public (Everyone can see) Components: productization Reporter: Richard Opalka Assignee: Richard Opalka Fix For: jbossws-native-3.2.2 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 12 months

1
3
0 / 0

[JBoss JIRA] Created: (JBWS-2871) Verify binary and source distributions on Windows OS

by Richard Opalka (JIRA)

Verify binary and source distributions on Windows OS ---------------------------------------------------- Key: JBWS-2871 URL: https://jira.jboss.org/jira/browse/JBWS-2871 Project: JBoss Web Services Issue Type: Task Security Level: Public (Everyone can see) Components: productization Reporter: Richard Opalka Assignee: Jim Ma Fix For: jbossws-metro-3.2.2, jbossws-cxf-3.2.2, jbossws-native-3.2.2 This means: * build binary distribution and execute all tests present in that distribution against AS 5.1.0.GA * build source distribution and execute all tests present in that distribution against AS 5.1.0.GA Use jbossws stack branches, i.e. jbossws-native-3.2.2.GA, jbossws-metro-3.2.2.GA and jbossws-cxf-3.2.2.GA, -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years

1
0
0 / 0

[JBoss JIRA] Created: (JBWS-2870) Pass JavaEE 5 CTS (jaxr, jaxws, jws, saaj modules)

by Richard Opalka (JIRA)

Pass JavaEE 5 CTS (jaxr, jaxws, jws, saaj modules) -------------------------------------------------- Key: JBWS-2870 URL: https://jira.jboss.org/jira/browse/JBWS-2870 Project: JBoss Web Services Issue Type: Sub-task Security Level: Public (Everyone can see) Components: productization Reporter: Richard Opalka Assignee: Jim Ma Fix For: jbossws-cxf-3.2.2 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years

1
0
0 / 0

[JBoss JIRA] Created: (JBWS-2868) Release SPI, Common and Framework

by Richard Opalka (JIRA)

Release SPI, Common and Framework --------------------------------- Key: JBWS-2868 URL: https://jira.jboss.org/jira/browse/JBWS-2868 Project: JBoss Web Services Issue Type: Task Security Level: Public (Everyone can see) Components: productization Reporter: Richard Opalka Assignee: Alessio Soldano Fix For: jbossws-metro-3.2.2, jbossws-cxf-3.2.2, jbossws-native-3.2.2 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years

1
0
0 / 0

[JBoss JIRA] Created: (JBWS-2862) Release JBossWS-Metro 3.2.2.GA binaries and sources

by Richard Opalka (JIRA)

Release JBossWS-Metro 3.2.2.GA binaries and sources --------------------------------------------------- Key: JBWS-2862 URL: https://jira.jboss.org/jira/browse/JBWS-2862 Project: JBoss Web Services Issue Type: Task Security Level: Public (Everyone can see) Components: productization Reporter: Richard Opalka Assignee: Alessio Soldano Fix For: jbossws-metro-3.2.2 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years

1
0
0 / 0

[JBoss JIRA] Created: (JBWS-2863) Release JBossWS-CXF 3.2.2.GA binaries and sources

by Richard Opalka (JIRA)

Release JBossWS-CXF 3.2.2.GA binaries and sources ------------------------------------------------- Key: JBWS-2863 URL: https://jira.jboss.org/jira/browse/JBWS-2863 Project: JBoss Web Services Issue Type: Task Security Level: Public (Everyone can see) Components: productization Reporter: Richard Opalka Assignee: Alessio Soldano Fix For: jbossws-cxf-3.2.2 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years

1
0
0 / 0

[JBoss JIRA] Created: (JBWS-2864) Release JBossWS-Native 3.2.2.GA binaries and sources

by Richard Opalka (JIRA)

Release JBossWS-Native 3.2.2.GA binaries and sources ---------------------------------------------------- Key: JBWS-2864 URL: https://jira.jboss.org/jira/browse/JBWS-2864 Project: JBoss Web Services Issue Type: Task Security Level: Public (Everyone can see) Components: productization Reporter: Richard Opalka Assignee: Alessio Soldano Fix For: jbossws-native-3.2.2 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

15 years

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jbossws-issues December 2009