[jboss-jira] [JBoss JIRA] (AS7-6476) missing-method-permissions-exclude-mode isn't available in AS7
jaikiran pai (JIRA)
jira-events at lists.jboss.org
Thu Feb 7 08:31:51 EST 2013
jaikiran pai created AS7-6476:
---------------------------------
Summary: missing-method-permissions-exclude-mode isn't available in AS7
Key: AS7-6476
URL: https://issues.jboss.org/browse/AS7-6476
Project: Application Server 7
Issue Type: Bug
Components: EJB
Affects Versions: 7.1.3.Final (EAP), 7.1.1.Final
Reporter: jaikiran pai
Assignee: jaikiran pai
Priority: Blocker
Fix For: 7.2.0.Alpha1
Previous versions of JBoss AS allowed users to configure a <missing-method-permissions-exclude-mode> element which would decide whether methods without any specific security configurations, on a secured bean, are allowed access or not.
In AS7, we allow access to such methods and it behaves similar to @PermitAll. We should allow users to have control over this.
Related article http://anil-identity.blogspot.in/2010/02/tip-interpretation-of-missing-ejb.html
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
More information about the jboss-jira
mailing list