[jboss-jira] [JBoss JIRA] Created: (SECURITY-367) JACC delegetation for unprotected web resources is not working anymore.

Karel Gardas (JIRA) jira-events at lists.jboss.org
Mon Feb 16 11:23:45 EST 2009


JACC delegetation for unprotected web resources is not working anymore.
-----------------------------------------------------------------------

                 Key: SECURITY-367
                 URL: https://jira.jboss.org/jira/browse/SECURITY-367
             Project: JBoss Security and Identity Management
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: JBossSX
         Environment: JBOSS 4.2.3 GA for JDK 1.6 (I don't know which security version is included), jdk 1.6, SunOS 5.11 snv_79a, x86_64 hardware.
            Reporter: Karel Gardas
            Assignee: Anil Saldhana


I'm testing JACC delegation to unprotected web resources feature which was added to JBoss based on this feature request: https://jira.jboss.org/jira/browse/JBAS-2519 but it seems the feature is not working any more. I'm judging based on my debug messages added to the JaccAuthorizationRealm class. If I don't use the feature and if the test web resource is protected, then my JACC gets called well. If it is unprotected and although delegation is switched on, my JACC is not called nor any delegation related method in JaccAuthorizationReal class (getSecurityConstraintsFromProvider)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the jboss-jira mailing list