[jboss-dev-forums] [Design of Security on JBoss] - Re: Security aspects failing in AS trunk

[stale.pedersen@jboss.org]

hi (im following up kabirs tests a bit),  i tested org.jboss.test.aop.test.SecurityUnitTestCase from head now and it fails with this stacktrace:

  | 23:21:01,972 INFO  [SecurityTester] TESTING XML Security
  | 23:21:01,973 INFO  [SecurityTester] testing unchecked constructor
  | 23:21:02,441 INFO  [SecurityTester] testing unchecked method
  | 23:21:02,507 ERROR [SecurityTester] failed
  | java.lang.SecurityException: Password Incorrect/Password Required
  | 	at org.jboss.aspects.security.AuthenticationInterceptor.handleGeneralSecurityException(AuthenticationInterceptor.java:55)
  | 	at org.jboss.aspects.security.AuthenticationInterceptor.invoke(AuthenticationInterceptor.java:70)
  | 	at org.jboss.test.aop.bean.JoinPoint_unchecked_N_2712120300325346458_70$aop.invokeNext(JoinPoint_unchecked_N_2712120300325346458_70$aop.java)
  | 	at org.jboss.test.aop.bean.JoinPoint_unchecked_N_2712120300325346458_70$aop.invokeJoinpoint(JoinPoint_unchecked_N_2712120300325346458_70$aop.java)
  | 	at org.jboss.test.aop.bean.SecuredPOJO$SecuredPOJOAdvisor.unchecked_N_2712120300325346458(SecuredPOJO$SecuredPOJOAdvisor.java)
  | 	at org.jboss.test.aop.bean.SecuredPOJO$SecuredPOJOInstanceAdvisor.unchecked_N_2712120300325346458(SecuredPOJO$SecuredPOJOInstanceAdvisor.java)
  | 	at org.jboss.test.aop.bean.SecuredPOJO.unchecked(SecuredPOJO.java)
  | 	at org.jboss.test.aop.bean.SecurityTester.org$jboss$test$aop$bean$SecurityTester$testXml$aop(SecurityTester.java:90)
  | 	at org.jboss.test.aop.bean.SecurityTester$SecurityTesterAdvisor.testXml7807095709035618991(SecurityTester$SecurityTesterAdvisor.java)
  | 	at org.jboss.test.aop.bean.SecurityTester.testXml(SecurityTester.java)
  | 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  | 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  | 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  | 	at java.lang.reflect.Method.invoke(Method.java:585)
  | 	at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:157)
  | 	at org.jboss.mx.server.Invocation.dispatch(Invocation.java:96)
  | 	at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)
  | 	at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
  | 	at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:668)
  | 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  | 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  | 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  | 	at java.lang.reflect.Method.invoke(Method.java:585)
  | 	at org.jboss.jmx.connector.invoker.InvokerAdaptorService.invoke(InvokerAdaptorService.java:270)
  | 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  | 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  | 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  | 	at java.lang.reflect.Method.invoke(Method.java:585)
  | 	at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:157)
  | 	at org.jboss.mx.server.Invocation.dispatch(Invocation.java:96)
  | 	at org.jboss.mx.interceptor.AbstractInterceptor.invoke(AbstractInterceptor.java:138)
  | 	at org.jboss.mx.server.Invocation.invoke(Invocation.java:90)
  | 	at org.jboss.mx.interceptor.ModelMBeanOperationInterceptor.invoke(ModelMBeanOperationInterceptor.java:140)
  | 	at org.jboss.jmx.connector.invoker.SerializableInterceptor.invoke(SerializableInterceptor.java:74)
  | 	at org.jboss.mx.server.Invocation.invoke(Invocation.java:90)
  | 	at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
  | 	at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:668)
  | 	at org.jboss.invocation.jrmp.server.JRMPProxyFactory.invoke(JRMPProxyFactory.java:179)
  | 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  | 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  | 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  | 	at java.lang.reflect.Method.invoke(Method.java:585)
  | 	at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:157)
  | 	at org.jboss.mx.server.Invocation.dispatch(Invocation.java:96)
  | 	at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)
  | 	at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
  | 	at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:668)
  | 	at org.jboss.invocation.jrmp.server.JRMPInvoker$MBeanServerAction.invoke(JRMPInvoker.java:815)
  | 	at org.jboss.invocation.jrmp.server.JRMPInvoker.invoke(JRMPInvoker.java:416)
  | 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  | 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  | 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  | 	at java.lang.reflect.Method.invoke(Method.java:585)
  | 	at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:294)
  | 	at sun.rmi.transport.Transport$1.run(Transport.java:153)
  | 	at java.security.AccessController.doPrivileged(Native Method)
  | 	at sun.rmi.transport.Transport.serviceCall(Transport.java:149)
  | 	at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:466)
  | 	at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:707)
  | 	at java.lang.Thread.run(Thread.java:595)
the similar stacktrace happens for the annotated test.
what we first try to do here is to create an object (constructor is marked as unchecked) and then call a method and a field that both are marked as unchecked. it creates the object without any errors, but the method fails.
if there is anything we need to change in our test / setup please let me know :)

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4137621#4137621

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4137621