[jboss-jira] [JBoss JIRA] (AS7-6910) run-as does not work for Servlet.init()

[Derek Horton (JIRA)]

     [ https://issues.jboss.org/browse/AS7-6910?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Derek Horton moved JBAS-9534 to AS7-6910:
-----------------------------------------

              Project: Application Server 7  (was: Application Server 3  4  5 and 6)
                  Key: AS7-6910  (was: JBAS-9534)
             Workflow: GIT Pull Request workflow   (was: jira)
    Affects Version/s: 7.1.3.Final (EAP)
                           (was: JBossAS-4.0.1 Final)
                           (was: JBossAS-4.0.0 Final)
                           (was: JBossAS-4.0.2 Final)
                           (was: JBossAS-4.0.1 SP1)
          Component/s: Security
                       Web
                           (was: Web (Tomcat) service)
                           (was: Security)
             Security:     (was: Public)

    
> run-as does not work for Servlet.init()
> ---------------------------------------
>
>                 Key: AS7-6910
>                 URL: https://issues.jboss.org/browse/AS7-6910
>             Project: Application Server 7
>          Issue Type: Bug
>          Components: Security, Web
>    Affects Versions: 7.1.3.Final (EAP)
>            Reporter: Derek Horton
>            Assignee: Scott Stark
>
> According to the servlet 2.4 spec, the run-as should be used for Servlet.init()
> page 285:
> " Clarification:  run-as  identity must apply to all calls from a servlet including init() and destroy() (12.7)"
> This isn't working. 
> Rather than breaking all the web integration tests with a deploy time error to prove the point, I'm attaching an example.zip
> % unzip example.zip
> % cd example
> % edit build.properties to point at JBoss
> % ant deploy
> The web integration tests do need updating to test for this.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira