[jboss-cvs] JBossAS SVN: r65590 - trunk/server/src/main/org/jboss/ejb/plugins.

[jboss-cvs-commits at lists.jboss.org]

Author: anil.saldhana at jboss.com
Date: 2007-09-24 13:57:13 -0400 (Mon, 24 Sep 2007)
New Revision: 65590

Modified:
   trunk/server/src/main/org/jboss/ejb/plugins/SecurityInterceptor.java
Log:
add roles to the message in the exception

Modified: trunk/server/src/main/org/jboss/ejb/plugins/SecurityInterceptor.java
===================================================================
--- trunk/server/src/main/org/jboss/ejb/plugins/SecurityInterceptor.java	2007-09-24 17:22:14 UTC (rev 65589)
+++ trunk/server/src/main/org/jboss/ejb/plugins/SecurityInterceptor.java	2007-09-24 17:57:13 UTC (rev 65590)
@@ -41,11 +41,11 @@
 import org.jboss.metadata.BeanMetaData;
 import org.jboss.metadata.SecurityIdentityMetaData;
 import org.jboss.security.AuthenticationManager;
-import org.jboss.security.AuthorizationManager;
 import org.jboss.security.ISecurityManagement;
 import org.jboss.security.RealmMapping;
 import org.jboss.security.RunAs;
 import org.jboss.security.RunAsIdentity;
+import org.jboss.security.SecurityConstants;
 import org.jboss.security.SecurityContext;
 import org.jboss.security.SecurityRolesAssociation;
 import org.jboss.security.SecurityUtil;
@@ -405,7 +405,9 @@
                                   callerRunAsIdentity, 
                                   methodRoles) ; 
       
-     String msg = "Denied: caller=" + caller;
+     String msg = "Denied: caller with subject=" + caller 
+                        + " and security context post-mapping roles=" + 
+                        currentSC.getUtil().getRoles() ;
      if(!isAuthorized)
         throw new SecurityException(msg); 
   }