]
RH Bugzilla Integration commented on JBWS-3858:
-----------------------------------------------
Carlo de Wolf <cdewolf(a)redhat.com> changed the Status of [bug
Misconfigured TCCL during endpoint method invocations when Spring
integration is enabled
----------------------------------------------------------------------------------------
Key: JBWS-3858
URL:
https://issues.jboss.org/browse/JBWS-3858
Project: JBoss Web Services
Issue Type: Bug
Components: jbossws-cxf
Reporter: Alessio Soldano
Assignee: Alessio Soldano
Fix For: jbossws-cxf-5.0
When the Spring integration is enabled, the TCCL that's set at the time the user
endpoint methods are executed is an instance of DelegateClassLoader whose parent actually
grants user visibility over classes he should only be given access if he declared a proper
module dependency.