[jboss-jira] [JBoss JIRA] Created: (SECURITY-290) Member variable for @UserPrincipal Annotation must be public even if there is a public getter for this member variable with @UserPrincipal Annotation

[Marco RöÃ]

Member variable for @UserPrincipal Annotation must be public even if there is a public getter for this member variable with @UserPrincipal Annotation
-----------------------------------------------------------------------------------------------------------------------------------------------------

                 Key: SECURITY-290
                 URL: https://jira.jboss.org/jira/browse/SECURITY-290
             Project: JBoss Security and Identity Management
          Issue Type: Bug
      Security Level: Public (Everyone can see)
         Environment: WinXp pro / eclpise 3.4 / Jboss Server 2.4 R
            Reporter: Marco Röösli
            Assignee: Anil Saldhana


I can't add @UserPrincipal just to a public getter Method.

My Entity:

....
@Column(name = "USERNAME", length = 16, nullable = false, unique = true)
private String username;


@UserPrincipal
public String getUsername() {
                return username;
}

With this code above i get this Error:

Caused by: java.lang.IllegalAccessException: Class org.jboss.seam.util.Reflections can not access a member of class ch.pomop.dummy.security.UserAccount with modifiers "private"
        at sun.reflect.Reflection.ensureMemberAccess(Reflection.java:65)
        at java.lang.reflect.Field.doSecurityCheck(Field.java:954)
        at java.lang.reflect.Field.getFieldAccessor(Field.java:895)
        at java.lang.reflect.Field.get(Field.java:357)
        at org.jboss.seam.util.Reflections.get(Reflections.java:51)
        at org.jboss.seam.util.Reflections.getAndWrap(Reflections.java:88)
        ... 83 more
Is it necessary to set the members public? or is this a bug?

As i changed the my Entity Code to:

My Entity:


@UserPrincipal
@Column(name = "USERNAME", length = 16, nullable = false, unique = true)
public String username;

}
it worked but I don't want to set my members public if there is an other way


thx for help

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira