[jboss-jira] [JBoss JIRA] (AS7-4687) Review the use of InheritableThreadLocal in SecurityContextAssociation

Tue May 1 20:45:17 EDT 2012

    [ https://issues.jboss.org/browse/AS7-4687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12689292#comment-12689292 ] 

Stuart Douglas commented on AS7-4687:
-------------------------------------

There is a config option to change it to a ThreadLocal, but it is disabled by default. Just changing the default would probably be sufficient. 

I am not sure what the broader impact of this change would be though.

> Review the use of InheritableThreadLocal in SecurityContextAssociation
> ----------------------------------------------------------------------
>
>                 Key: AS7-4687
>                 URL: https://issues.jboss.org/browse/AS7-4687
>             Project: Application Server 7
>          Issue Type: Task
>          Components: Security
>            Reporter: Stuart Douglas
>            Assignee: Stefan Guilhen
>
> There have been problems with the SecurityContext leaking into thread pools, due to the use of the InheritableThreadLocal. 
> Do we still need this to be an InheritableThreadLocal? If so, is there anything we can do to stop it from leaking into thread pools? 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira