[jboss-dev-forums] [Design of Security on JBoss] - Re: SecurityContext inherited by threads on the serverside

[anil.saldhana@jboss.com]

  | String flag = SecurityActions.getProperty("org.jboss.security.SecurityAssociation.ThreadLocal", "false");
  |       boolean useThreadLocal = Boolean.valueOf(flag).booleanValue();
  | 

Yes, you are right. 

This works in AS4.

In AS5, on the client side, SecurityAssociation works as is. But on the server side, SA uses SecurityContext (my stuff) underneath and there I had just used a SecurityContextAssociation with an inheritableThreadLocal directly.  I am fixing it with a system property.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4159083#4159083

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4159083