[jboss-cvs] JBossAS SVN: r91355 - branches/JBPAPP_5_0/build.

[jboss-cvs-commits at lists.jboss.org]

Author: smarlow at redhat.com
Date: 2009-07-16 17:00:08 -0400 (Thu, 16 Jul 2009)
New Revision: 91355

Modified:
   branches/JBPAPP_5_0/build/jbossas-5-disableauth.patch
   branches/JBPAPP_5_0/build/jbossas-5-enableauth.patch
Log:
JBPAPP-2229 Ensure access to profile service api is secured out of the box in EAP

Modified: branches/JBPAPP_5_0/build/jbossas-5-disableauth.patch
===================================================================
--- branches/JBPAPP_5_0/build/jbossas-5-disableauth.patch	2009-07-16 20:07:09 UTC (rev 91354)
+++ branches/JBPAPP_5_0/build/jbossas-5-disableauth.patch	2009-07-16 21:00:08 UTC (rev 91355)
@@ -482,3 +482,98 @@
 @@ -1,2 +0,0 @@
 -# A sample users.properties file for use with the UsersRolesLoginModule
 -# admin=admin
+--- ./server/all/deploy/profileservice-jboss-beans.xml	2009-07-16 16:07:19.000000000 -0400
++++ ./server/all/deploy/profileservice-jboss-beans.xml	2009-07-16 16:02:16.000000000 -0400
+@@ -174,7 +174,7 @@
+         <!-- Server side security interceptor stack -->
+         <property name="serverProxyInterceptors">
+             <list>
+-            <!-- comment this list to disable auth checks for the profileservice -->
++            <!-- uncomment to enable auth checks for the profileservice
+                 <bean class="org.jboss.aspects.security.AuthenticationInterceptor">
+                     <constructor>
+                         <parameter>
+@@ -195,6 +195,7 @@
+                         </parameter>
+                     </constructor>
+                 </bean>
++            -->
+             </list>
+         </property>
+         <depends>ConnectorMBean</depends>
+--- ./server/web/deploy/profileservice-jboss-beans.xml	2009-07-16 16:07:37.000000000 -0400
++++ ./server/web/deploy/profileservice-jboss-beans.xml	2009-07-16 16:02:48.000000000 -0400
+@@ -174,7 +174,7 @@
+         <!-- Server side security interceptor stack -->
+         <property name="serverProxyInterceptors">
+             <list>
+-            <!-- comment this list to disable auth checks for the profileservice -->
++            <!-- uncomment to enable auth checks for the profileservice
+                 <bean class="org.jboss.aspects.security.AuthenticationInterceptor">
+                     <constructor>
+                         <parameter>
+@@ -195,6 +195,7 @@
+                         </parameter>
+                     </constructor>
+                 </bean>
++            -->
+             </list>
+         </property>
+         <depends>ConnectorMBean</depends>
+--- ./server/default/deploy/profileservice-jboss-beans.xml	2009-07-16 16:07:50.000000000 -0400
++++ ./server/default/deploy/profileservice-jboss-beans.xml	2009-07-16 16:02:39.000000000 -0400
+@@ -174,7 +174,7 @@
+         <!-- Server side security interceptor stack -->
+         <property name="serverProxyInterceptors">
+             <list>
+-            <!-- comment this list to disable auth checks for the profileservice -->
++            <!-- uncomment to enable auth checks for the profileservice
+                 <bean class="org.jboss.aspects.security.AuthenticationInterceptor">
+                     <constructor>
+                         <parameter>
+@@ -195,6 +195,7 @@
+                         </parameter>
+                     </constructor>
+                 </bean>
++            -->
+             </list>
+         </property>
+         <depends>ConnectorMBean</depends>
+--- ./server/production/deploy/profileservice-jboss-beans.xml	2009-07-16 16:08:00.000000000 -0400
++++ ./server/production/deploy/profileservice-jboss-beans.xml	2009-07-16 16:02:44.000000000 -0400
+@@ -174,7 +174,7 @@
+         <!-- Server side security interceptor stack -->
+         <property name="serverProxyInterceptors">
+             <list>
+-            <!-- comment this list to disable auth checks for the profileservice -->
++            <!-- uncomment to enable auth checks for the profileservice
+                 <bean class="org.jboss.aspects.security.AuthenticationInterceptor">
+                     <constructor>
+                         <parameter>
+@@ -195,6 +195,7 @@
+                         </parameter>
+                     </constructor>
+                 </bean>
++            -->
+             </list>
+         </property>
+         <depends>ConnectorMBean</depends>
+--- ./server/standard/deploy/profileservice-jboss-beans.xml	2009-07-16 16:08:31.000000000 -0400
++++ ./server/standard/deploy/profileservice-jboss-beans.xml	2009-07-16 16:02:47.000000000 -0400
+@@ -174,7 +174,7 @@
+         <!-- Server side security interceptor stack -->
+         <property name="serverProxyInterceptors">
+             <list>
+-            <!-- comment this list to disable auth checks for the profileservice -->
++            <!-- uncomment to enable auth checks for the profileservice
+                 <bean class="org.jboss.aspects.security.AuthenticationInterceptor">
+                     <constructor>
+                         <parameter>
+@@ -195,6 +195,7 @@
+                         </parameter>
+                     </constructor>
+                 </bean>
++            -->
+             </list>
+         </property>
+         <depends>ConnectorMBean</depends>

Modified: branches/JBPAPP_5_0/build/jbossas-5-enableauth.patch
===================================================================
--- branches/JBPAPP_5_0/build/jbossas-5-enableauth.patch	2009-07-16 20:07:09 UTC (rev 91354)
+++ branches/JBPAPP_5_0/build/jbossas-5-enableauth.patch	2009-07-16 21:00:08 UTC (rev 91355)
@@ -548,3 +548,98 @@
  # A sample users.properties file for use with the UsersRolesLoginModule
 -admin=admin
 +# admin=admin
+--- ./server/all/deploy/profileservice-jboss-beans.xml	2009-07-16 16:02:16.000000000 -0400
++++ ./server/all/deploy/profileservice-jboss-beans.xml	2009-07-16 16:07:19.000000000 -0400
+@@ -174,7 +174,7 @@
+         <!-- Server side security interceptor stack -->
+         <property name="serverProxyInterceptors">
+             <list>
+-            <!-- uncomment to enable auth checks for the profileservice
++            <!-- comment this list to disable auth checks for the profileservice -->
+                 <bean class="org.jboss.aspects.security.AuthenticationInterceptor">
+                     <constructor>
+                         <parameter>
+@@ -195,7 +195,6 @@
+                         </parameter>
+                     </constructor>
+                 </bean>
+-            -->
+             </list>
+         </property>
+         <depends>ConnectorMBean</depends>
+--- ./server/web/deploy/profileservice-jboss-beans.xml	2009-07-16 16:02:48.000000000 -0400
++++ ./server/web/deploy/profileservice-jboss-beans.xml	2009-07-16 16:07:37.000000000 -0400
+@@ -174,7 +174,7 @@
+         <!-- Server side security interceptor stack -->
+         <property name="serverProxyInterceptors">
+             <list>
+-            <!-- uncomment to enable auth checks for the profileservice
++            <!-- comment this list to disable auth checks for the profileservice -->
+                 <bean class="org.jboss.aspects.security.AuthenticationInterceptor">
+                     <constructor>
+                         <parameter>
+@@ -195,7 +195,6 @@
+                         </parameter>
+                     </constructor>
+                 </bean>
+-            -->
+             </list>
+         </property>
+         <depends>ConnectorMBean</depends>
+--- ./server/default/deploy/profileservice-jboss-beans.xml	2009-07-16 16:02:39.000000000 -0400
++++ ./server/default/deploy/profileservice-jboss-beans.xml	2009-07-16 16:07:50.000000000 -0400
+@@ -174,7 +174,7 @@
+         <!-- Server side security interceptor stack -->
+         <property name="serverProxyInterceptors">
+             <list>
+-            <!-- uncomment to enable auth checks for the profileservice
++            <!-- comment this list to disable auth checks for the profileservice -->
+                 <bean class="org.jboss.aspects.security.AuthenticationInterceptor">
+                     <constructor>
+                         <parameter>
+@@ -195,7 +195,6 @@
+                         </parameter>
+                     </constructor>
+                 </bean>
+-            -->
+             </list>
+         </property>
+         <depends>ConnectorMBean</depends>
+--- ./server/production/deploy/profileservice-jboss-beans.xml	2009-07-16 16:02:44.000000000 -0400
++++ ./server/production/deploy/profileservice-jboss-beans.xml	2009-07-16 16:08:00.000000000 -0400
+@@ -174,7 +174,7 @@
+         <!-- Server side security interceptor stack -->
+         <property name="serverProxyInterceptors">
+             <list>
+-            <!-- uncomment to enable auth checks for the profileservice
++            <!-- comment this list to disable auth checks for the profileservice -->
+                 <bean class="org.jboss.aspects.security.AuthenticationInterceptor">
+                     <constructor>
+                         <parameter>
+@@ -195,7 +195,6 @@
+                         </parameter>
+                     </constructor>
+                 </bean>
+-            -->
+             </list>
+         </property>
+         <depends>ConnectorMBean</depends>
+--- ./server/standard/deploy/profileservice-jboss-beans.xml	2009-07-16 16:02:47.000000000 -0400
++++ ./server/standard/deploy/profileservice-jboss-beans.xml	2009-07-16 16:08:31.000000000 -0400
+@@ -174,7 +174,7 @@
+         <!-- Server side security interceptor stack -->
+         <property name="serverProxyInterceptors">
+             <list>
+-            <!-- uncomment to enable auth checks for the profileservice
++            <!-- comment this list to disable auth checks for the profileservice -->
+                 <bean class="org.jboss.aspects.security.AuthenticationInterceptor">
+                     <constructor>
+                         <parameter>
+@@ -195,7 +195,6 @@
+                         </parameter>
+                     </constructor>
+                 </bean>
+-            -->
+             </list>
+         </property>
+         <depends>ConnectorMBean</depends>