[jboss-dev-forums] [Design of Security on JBoss] - Re: Security EJB2 and dependencies

[adrian@jboss.org]

"anil.saldhana at jboss.com" wrote : Overall, we have between 7-10% of security test failures in the AS test suite in the last few months. A few of the tests are some legacy stuff (hard core SecurityAssociation stuff) that I have not yet decided whether we will support going forward.
  | 

I'd estimate that besides the clustering tests, most of the failures in the JBoss5
testsuite are due to broken security integration.
http://hudson.jboss.org/hudson/job/JBoss-AS-5.0.x-TestSuite-sun15/533/testReport/

Most look like deployment issues, which usually materialises as NameNotFoundException
when there is no real dependency expressed to the new deployers.
e.g. choosing one at random:
http://hudson.jboss.org/hudson/job/JBoss-AS-5.0.x-TestSuite-sun15/533/testReport/org.jboss.test.jacc.test/EJBSpecUnitTestCase(JACC)/testRunAsWithRoles/

If you look at the JACC tests from yesterday, you've lost half the tests!!!!!
http://hudson.jboss.org/hudson/job/JBoss-AS-5.0.x-TestSuite-sun15/533/testReport/org.jboss.test.jacc.test/

I'll see if I can find some low hanging fruit in these tests (like the dependency problem
I mentioned earlier). 
It'll give me chance to read, learn and **COMPLAIN** about the new security code. :-)

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4145923#4145923

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4145923