[jboss-jira] [JBoss JIRA] Commented: (AS7-989) Security context is not cleared after servlet invocation

[Darran Lofthouse (JIRA)]

    [ https://issues.jboss.org/browse/AS7-989?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12619936#comment-12619936 ] 

Darran Lofthouse commented on AS7-989:
--------------------------------------

This appears to be a bigger issue in that we don't seem to to have the equivalent of the SecurityAssociationValve that we had from previous AS releases, not only did that valve clear the thread association it also set the new association on subsequent requests that did not require re-authentication.

> Security context is not cleared after servlet invocation
> --------------------------------------------------------
>
>                 Key: AS7-989
>                 URL: https://issues.jboss.org/browse/AS7-989
>             Project: Application Server 7
>          Issue Type: Bug
>          Components: Security, Web
>            Reporter: Carlo de Wolf
>            Assignee: Darran Lofthouse
>            Priority: Critical
>             Fix For: 7.1.0.Alpha1
>
>


--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira