[jboss-cvs] JBossAS SVN: r70599 - projects/security/security-jboss-sx/trunk/jbosssx/src/main/org/jboss/security/authorization/modules.

[jboss-cvs-commits at lists.jboss.org]

Author: anil.saldhana at jboss.com
Date: 2008-03-09 18:17:12 -0400 (Sun, 09 Mar 2008)
New Revision: 70599

Modified:
   projects/security/security-jboss-sx/trunk/jbosssx/src/main/org/jboss/security/authorization/modules/AbstractJACCModuleDelegate.java
Log:
ignore the subject principals as they may not be the ultimate deployment mapped roles

Modified: projects/security/security-jboss-sx/trunk/jbosssx/src/main/org/jboss/security/authorization/modules/AbstractJACCModuleDelegate.java
===================================================================
--- projects/security/security-jboss-sx/trunk/jbosssx/src/main/org/jboss/security/authorization/modules/AbstractJACCModuleDelegate.java	2008-03-09 18:18:23 UTC (rev 70598)
+++ projects/security/security-jboss-sx/trunk/jbosssx/src/main/org/jboss/security/authorization/modules/AbstractJACCModuleDelegate.java	2008-03-09 22:17:12 UTC (rev 70599)
@@ -48,11 +48,14 @@
    protected Principal[] getPrincipals(Subject subject, Role role)
    {
       Set<Principal> principalsSet = null;
+      //Ignore the subject principals as the role principals are the mapped ones
+      /*
       if(subject != null)
       {
          principalsSet = new HashSet<Principal>();
          principalsSet.addAll(subject.getPrincipals()); 
       }
+      */
       if(role != null)
       {
          if(principalsSet == null)