[jboss-jira] [JBoss JIRA] (JBJCA-1222) Make sure that Subject operations runs as privileged

Jesper Pedersen (JIRA) issues at jboss.org
Tue Sep 30 11:28:05 EDT 2014


     [ https://issues.jboss.org/browse/JBJCA-1222?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jesper Pedersen updated JBJCA-1222:
-----------------------------------
        Summary: Make sure that Subject operations runs as privileged  (was: org.jboss.jca.adapters.jdbc.WrapperDataSource#getConnection() requires unusual permissions)
    Description: 
Requirements
* SubjectFactory operations
* Methods on Subject instance

  was:
The WrapperDataSource calls AbstractConnectionManager#allocateConnection() which in turn causes JBossSecuritySubjectFactory#createSubject() to be called.  This method requires special/unusual permissions that a user deployment cannot be expected to configure.

The connection manager and/or the wrapper data source should probably check a more pedestrian "get connection" sort of permission, and then do the rest of the work in a privileged context.



> Make sure that Subject operations runs as privileged
> ----------------------------------------------------
>
>                 Key: JBJCA-1222
>                 URL: https://issues.jboss.org/browse/JBJCA-1222
>             Project: IronJacamar
>          Issue Type: Bug
>            Reporter: David Lloyd
>            Assignee: Jesper Pedersen
>
> Requirements
> * SubjectFactory operations
> * Methods on Subject instance



--
This message was sent by Atlassian JIRA
(v6.3.1#6329)


More information about the jboss-jira mailing list