[jboss-jira] [JBoss JIRA] Updated: (JBAS-6420) JBossWebRealm->hasUserDataPermission check with JBoss Security needs Subject

[Anil Saldhana (JIRA)]

     [ https://jira.jboss.org/jira/browse/JBAS-6420?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Anil Saldhana updated JBAS-6420:
--------------------------------

    Fix Version/s: JBossAS-5.1.0.Beta1
                   JBossAS-6.0.0.Alpha1
                       (was: JBossAS-5.0.1.GA)


> JBossWebRealm->hasUserDataPermission check with JBoss Security needs Subject
> ----------------------------------------------------------------------------
>
>                 Key: JBAS-6420
>                 URL: https://jira.jboss.org/jira/browse/JBAS-6420
>             Project: JBoss Application Server
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Security, Web (Tomcat) service
>    Affects Versions: JBossAS-5.0.0.GA
>            Reporter: Anil Saldhana
>            Assignee: Anil Saldhana
>             Fix For: JBossAS-5.1.0.Beta1, JBossAS-6.0.0.Alpha1
>
>
> Tomcat uses the hasUserDataPermission check to see if there is a need for https port redirect.  A subject is expected by the JBoss Security layer.  Even though the subject does not play any role in the check, it is needed for any authorization.  Handle the null subject use case.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira