[jboss-jira] [JBoss JIRA] (JBJCA-1222) Make sure that Subject operations runs as privileged
Jesper Pedersen (JIRA)
issues at jboss.org
Tue Sep 30 11:28:05 EDT 2014
[ https://issues.jboss.org/browse/JBJCA-1222?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jesper Pedersen updated JBJCA-1222:
-----------------------------------
Summary: Make sure that Subject operations runs as privileged (was: org.jboss.jca.adapters.jdbc.WrapperDataSource#getConnection() requires unusual permissions)
Description:
Requirements
* SubjectFactory operations
* Methods on Subject instance
was:
The WrapperDataSource calls AbstractConnectionManager#allocateConnection() which in turn causes JBossSecuritySubjectFactory#createSubject() to be called. This method requires special/unusual permissions that a user deployment cannot be expected to configure.
The connection manager and/or the wrapper data source should probably check a more pedestrian "get connection" sort of permission, and then do the rest of the work in a privileged context.
> Make sure that Subject operations runs as privileged
> ----------------------------------------------------
>
> Key: JBJCA-1222
> URL: https://issues.jboss.org/browse/JBJCA-1222
> Project: IronJacamar
> Issue Type: Bug
> Reporter: David Lloyd
> Assignee: Jesper Pedersen
>
> Requirements
> * SubjectFactory operations
> * Methods on Subject instance
--
This message was sent by Atlassian JIRA
(v6.3.1#6329)
More information about the jboss-jira
mailing list