[jboss-cvs] JBossAS SVN: r63957 - trunk/server/src/main/org/jboss/ejb/plugins/security.

[jboss-cvs-commits at lists.jboss.org]

Author: anil.saldhana at jboss.com
Date: 2007-07-10 15:01:51 -0400 (Tue, 10 Jul 2007)
New Revision: 63957

Modified:
   trunk/server/src/main/org/jboss/ejb/plugins/security/PreSecurityInterceptor.java
Log:
set the security context on the invocation for ejb location inv

Modified: trunk/server/src/main/org/jboss/ejb/plugins/security/PreSecurityInterceptor.java
===================================================================
--- trunk/server/src/main/org/jboss/ejb/plugins/security/PreSecurityInterceptor.java	2007-07-10 19:01:19 UTC (rev 63956)
+++ trunk/server/src/main/org/jboss/ejb/plugins/security/PreSecurityInterceptor.java	2007-07-10 19:01:51 UTC (rev 63957)
@@ -40,6 +40,9 @@
  *  Interceptor that performs the initialization required for 
  *  the security interceptor. This interceptor performs
  *  Security Context establishment and other initialization required
+ *  - The Outgoing run-as from the security context is pushed to incoming run-as
+ *  - For EJB Local Invocations, the security context is obtained from the
+ *  SecurityContextAssocation threadlocal and placed on the invocation.
  *  @author Anil.Saldhana at redhat.com
  *  @since  Apr 30, 2007 
  *  @version $Revision$
@@ -86,6 +89,9 @@
          SecurityContext sc = SecurityActions.getSecurityContext();
          if(sc != null)
            si = sc.getUtil().getSecurityIdentity(); 
+
+         //Set the security context on the invocation
+         mi.setSecurityContext(sc); 
       }
       else
       {
@@ -119,7 +125,9 @@
          //Cache the security context
          SecurityContext sc = SecurityActions.getSecurityContext();
          if(sc != null)
-            si = sc.getUtil().getSecurityIdentity();  
+            si = sc.getUtil().getSecurityIdentity();
+         //Set the security context on the invocation
+         mi.setSecurityContext(sc); 
       }
       else
       {