[jboss-cvs] jboss-seam/src/main/org/jboss/seam/security ...

[Shane Bryzak]

  User: sbryzak2
  Date: 07/01/02 02:42:57

  Modified:    src/main/org/jboss/seam/security    Identity.java
                        SeamSecurityManager.java
  Removed:     src/main/org/jboss/seam/security   
                        AuthenticationException.java
  Log:
  more security stuff
  
  Revision  Changes    Path
  1.6       +1 -1      jboss-seam/src/main/org/jboss/seam/security/Identity.java
  
  (In the diff below, changes in quantity of whitespace are not shown.)
  
  Index: Identity.java
  ===================================================================
  RCS file: /cvsroot/jboss/jboss-seam/src/main/org/jboss/seam/security/Identity.java,v
  retrieving revision 1.5
  retrieving revision 1.6
  diff -u -b -r1.5 -r1.6
  --- Identity.java	21 Dec 2006 05:32:54 -0000	1.5
  +++ Identity.java	2 Jan 2007 07:42:57 -0000	1.6
  @@ -33,7 +33,7 @@
   
         if (instance == null)
         {
  -         throw new AuthenticationException(
  +         throw new IllegalStateException(
                  "No Identity exists in session scope");
         }
   
  
  
  
  1.33      +4 -3      jboss-seam/src/main/org/jboss/seam/security/SeamSecurityManager.java
  
  (In the diff below, changes in quantity of whitespace are not shown.)
  
  Index: SeamSecurityManager.java
  ===================================================================
  RCS file: /cvsroot/jboss/jboss-seam/src/main/org/jboss/seam/security/SeamSecurityManager.java,v
  retrieving revision 1.32
  retrieving revision 1.33
  diff -u -b -r1.32 -r1.33
  --- SeamSecurityManager.java	31 Dec 2006 01:18:31 -0000	1.32
  +++ SeamSecurityManager.java	2 Jan 2007 07:42:57 -0000	1.33
  @@ -202,10 +202,11 @@
         {
            wm.assertObject(ident);
   
  -         for (Role r : ident.getRoles())
  -            wm.assertObject(r);
  +         // TODO roles no longer come from the identity 
  +//         for (Role r : ident.getRoles())
  +//            wm.assertObject(r);
   
  -         /** @todo Assert the Identity's explicit permissions also? */      
  +         // TODO Assert the Identity's explicit permissions also? */      
         }      
   
         return wm;