[jboss-jira] [JBoss JIRA] (WFLY-8560) EJBAccessException when MDB contains RunAs annotation

[Stuart Douglas (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-8560?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Stuart Douglas resolved WFLY-8560.
----------------------------------
    Resolution: Rejected


Adding @RunAs is enough to enable security for an EJB, which means invocations will be disabled by default. You need to add @PermitAll to the EJB as well as @RunAs for this to work.

> EJBAccessException when MDB contains RunAs annotation
> -----------------------------------------------------
>
>                 Key: WFLY-8560
>                 URL: https://issues.jboss.org/browse/WFLY-8560
>             Project: WildFly
>          Issue Type: Bug
>          Components: EJB, Security
>    Affects Versions: 10.1.0.Final
>            Reporter: Josef Cacek
>            Assignee: Stuart Douglas
>            Priority: Blocker
>         Attachments: helloworld-mdb-src.zip, wildfly-helloworld-mdb.war
>
>
> If an MDB contains {{@RunAs}} annotation, then receiving messages fails with 
> {noformat}
> 09:26:48,243 ERROR [org.apache.activemq.artemis.ra] (Thread-4 (ActiveMQ-client-global-threads-580560225)) AMQ154004: Failed to deliver message: javax.ejb.EJBAccessException: WFLYEJB0364: Invocation on method: public void org.jboss.as.quickstarts.ejb.remote.mdb.HelloWithRunAsMDB.onMessage(javax.jms.Message) of bean: HelloWithRunAsMDB is not allowed
> {noformat}
> The {{@RunAs}} must not restrict access to a bean (incoming calls), it just says which role will be used for outgoing calls.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)