[jboss-jira] [JBoss JIRA] (JBAS-9534) run-as does not work for Servlet.init()

[Derek Horton (JIRA)]

Derek Horton created JBAS-9534:
----------------------------------

             Summary: run-as does not work for Servlet.init()
                 Key: JBAS-9534
                 URL: https://issues.jboss.org/browse/JBAS-9534
             Project: Application Server 3  4  5 and 6
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: Security, Web (Tomcat) service
    Affects Versions: JBossAS-4.0.0 Final, JBossAS-4.0.1 Final, JBossAS-4.0.1 SP1, JBossAS-4.0.2 Final
            Reporter: Derek Horton
            Assignee: Scott Stark


According to the servlet 2.4 spec, the run-as should be used for Servlet.init()
page 285:
" Clarification:  run-as  identity must apply to all calls from a servlet including init() and destroy() (12.7)"

This isn't working. 

Rather than breaking all the web integration tests with a deploy time error to prove the point, I'm attaching an example.zip

% unzip example.zip
% cd example
% edit build.properties to point at JBoss
% ant deploy

The web integration tests do need updating to test for this.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira