[jboss-jira] [JBoss JIRA] Resolved: (SECURITY-465) Remove role-name constraint from 'Security Domain Test' servlet within jboss-negotation-toolkit

Darran Lofthouse (JIRA) jira-events at lists.jboss.org
Wed Mar 3 12:18:10 EST 2010


     [ https://jira.jboss.org/jira/browse/SECURITY-465?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse resolved SECURITY-465.
---------------------------------------

    Fix Version/s:     (was: Negotiation_2.0.4.GA)
                       (was: Negotiation_2.0.3.SP3)
       Resolution: Rejected


To enable authentication in the web.xml at least one role needs to be specified.

> Remove role-name constraint from 'Security Domain Test' servlet within jboss-negotation-toolkit
> -----------------------------------------------------------------------------------------------
>
>                 Key: SECURITY-465
>                 URL: https://jira.jboss.org/jira/browse/SECURITY-465
>             Project: PicketBox (JBoss Security and Identity Management)
>          Issue Type: Feature Request
>      Security Level: Public(Everyone can see) 
>          Components: Negotiation
>    Affects Versions: Negotiation_2.0.3.SP2 
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>
> The jboss-negotiation-toolkit is tested against the end users installation, for this reason we should not assume the user will be in the 'Users' role and allow any roles.
> The toolkit still displays all the roles loaded for the user so can still be used for testing the role searching.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the jboss-jira mailing list