[jbossseam-issues] [JBoss JIRA] Created: (JBSEAM-3838) Permission check fails on collections that contain lazily initialized entities
by Georges Berscheid (JIRA)
Permission check fails on collections that contain lazily initialized entities
------------------------------------------------------------------------------
Key: JBSEAM-3838
URL: https://jira.jboss.org/jira/browse/JBSEAM-3838
Project: Seam
Issue Type: Bug
Components: Security
Affects Versions: 2.1.0.SP1
Reporter: Georges Berscheid
org.jboss.seam.security.permission.PermissionMapper.filterByPermission:94
The permission filter checks if the target of the check is of the same class as the target of the permission. If the collection-parameter is the result of a javax.persistence.Query.getResultList() (using Hibernate), and one of the entities returned in that List had previously been lazily fetched (e.g. as part of an entity relationship) this check will fail.
Hibernate probably does some optimization and knows that it had fetched this entity before, and hence puts the lazy proxy into the result list. The proxy's class name is something like Entity_$$_javassist_12 which won't match the class name of the permission target (Entity).
The only work-around I could find for this is to eagerly fetch all entity relationships that are affected by this behavior, which kills the performance of the application.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
14 years, 11 months
[jbossseam-issues] [JBoss JIRA] Created: (JBSEAM-1563) create "bin" distribution
by Dan Allen (JIRA)
create "bin" distribution
-------------------------
Key: JBSEAM-1563
URL: http://jira.jboss.com/jira/browse/JBSEAM-1563
Project: JBoss Seam
Issue Type: Feature Request
Components: Core
Affects Versions: 2.0.0.BETA1, 1.3.0.ALPHA, 1.2.1.GA
Reporter: Dan Allen
The current releases of Seam are ridiculously large, weighing in at around 80MB. That is almost as big as the JBoss AS download! While it is critical to offer the entire bundle for Seam developers, contributors, and source builders, I think it would be appropriate to offer a "bin" distribution that is intended just to run Seam. Perhaps just spin off seam-gen as its own download. That should give people exactly what they need to run Seam, and nothing more.
Below is a comparison table of some competing projects:
Spring Framework: 10MB (2.6MB if you pull it from the maven repository)
Ruby on Rails: 2.2 MB (standalone version)
I remember when I first discovered Seam, I put off trying it out because it was too hefty of a download. Let's make it more attractive.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
14 years, 11 months
[jbossseam-issues] [JBoss JIRA] Created: (JBSEAM-1557) Seam is peforming a redirect in when running as a portlet, rather than using the portlet lifecycle
by Neil Griffin (JIRA)
Seam is peforming a redirect in when running as a portlet, rather than using the portlet lifecycle
--------------------------------------------------------------------------------------------------
Key: JBSEAM-1557
URL: http://jira.jboss.com/jira/browse/JBSEAM-1557
Project: JBoss Seam
Issue Type: Bug
Components: Core
Affects Versions: 1.2.1.GA
Environment: WinXP / Liferay 4.3.0 / Tomcat 6.0.13
Reporter: Neil Griffin
Background: I found this problem when attempting to package the Seam "Registration" example as a portlet under Liferay Portal.
Section 7.4.2 of the JSF 1.1 specifcation says that since redirects are not possible in the case of portlets. Nevertheless, the Seam Conversation Manager (Manager.java) is forcing the portal to redirect outside its portal pages, rather than use the portlet lifecycle.
The way this would be manifested to the user would be like this: If a Seam application was contained within a portlet, and the portlet were placed on a portal page, then when the user clicks on a button that invokes navigation to a different JSF view, then the Seam application would "jump out" (so to speak) of the rectangular portlet container, and become a full-browser-page thing. This is incorrect. If a Seam application starts out as a portlet, then it must remain a portlet for its entire lifespan. In addition, the current behavior of Seam is not conforming to section 7.4.2 of the JSF 1.1. specification.
Now, it might be the case that this redirect works under JBoss Portal, but it causes exceptions to be thrown under Liferay Portal. This is because Liferay Portal expects JSF-based portlets to not perform redirects, as they must not do that anyway.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
14 years, 11 months