[jboss-jira] [JBoss JIRA] (AS7-6476) missing-method-permissions-exclude-mode isn't available in AS7

[jaikiran pai (JIRA)]

     [ https://issues.jboss.org/browse/AS7-6476?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

jaikiran pai resolved AS7-6476.
-------------------------------

    Resolution: Done


Josef, I'm resolving this JIRA since this JIRA was meant to introduce the support for the missing method permission, which was missing earlier. If you still have concern about the default value for this attribute, then let's please discuss it in the AS7 dev mailing list.

                
> missing-method-permissions-exclude-mode isn't available in AS7
> --------------------------------------------------------------
>
>                 Key: AS7-6476
>                 URL: https://issues.jboss.org/browse/AS7-6476
>             Project: Application Server 7
>          Issue Type: Bug
>          Components: EJB
>    Affects Versions: 7.1.1.Final, 7.1.3.Final (EAP)
>            Reporter: jaikiran pai
>            Assignee: jaikiran pai
>            Priority: Blocker
>             Fix For: EAP 6.1.0.Alpha (7.2.0.Final)
>
>
> Previous versions of JBoss AS allowed users to configure a <missing-method-permissions-exclude-mode> element which would decide whether methods without any specific security configurations, on a secured bean, are allowed access or not.
> In AS7, we allow access to such methods and it behaves similar to @PermitAll. We should allow users to have control over this.
> Related article http://anil-identity.blogspot.in/2010/02/tip-interpretation-of-missing-ejb.html

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira