[jboss-jira] [JBoss JIRA] Created: (JBAS-6131) EJB1.1 isCallerInRole throws RTE if role is not found in deployment descriptor

Thu Oct 23 16:06:31 EDT 2008

EJB1.1 isCallerInRole throws RTE if role is not found in deployment descriptor
------------------------------------------------------------------------------

                 Key: JBAS-6131
                 URL: https://jira.jboss.org/jira/browse/JBAS-6131
             Project: JBoss Application Server
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: EJB2, Security
    Affects Versions: JBossAS-5.0.0.CR2
            Reporter: Anil Saldhana
            Assignee: Anil Saldhana
            Priority: Minor
             Fix For: JBossAS-5.0.0.GA

jboss.xml has an "enforce-ejb-restrictions" flag. This can be used to ensure that a RTE is thrown for isCallerInRole checks for roles that do not exist in the DD.

Security 2.0.2.CR9 post releases contain  ejbResource.setEJBRestrictions flag which when set will make the enforcement happen.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira