[jboss-jira] [JBoss JIRA] (AS7-6686) JNDI name permission checking is wrong

David Lloyd (JIRA) jira-events at lists.jboss.org
Wed Mar 6 21:52:56 EST 2013


David Lloyd created AS7-6686:
--------------------------------

             Summary: JNDI name permission checking is wrong
                 Key: AS7-6686
                 URL: https://issues.jboss.org/browse/AS7-6686
             Project: Application Server 7
          Issue Type: Bug
          Components: Naming
            Reporter: David Lloyd
            Assignee: Eduardo Martins
            Priority: Critical
             Fix For: 8.0.0.Alpha1


When {{org.jboss.as.naming.NamingContext}} checks {{JndiPermission}}s, it is not using the proper absolute name.

One example:

{noformat}
Failed permission check: permission ("org.jboss.as.naming.JndiPermission" "env/ejb/AEJBLocal" "lookup")
{noformat}

In this example, the name being checked is "{{env/ejb/AEJBLocal}}", where it should probably be "{{java:comp/env/ejb/AEJBLocal}}".  The naming context name is being left off in the shuffle; the "absolute name" calculated by {{org.jboss.as.naming.NamingContext#getAbsoluteName()}} is still only relative to the naming context's own root.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the jboss-jira mailing list