[jboss-jira] [JBoss JIRA] (WFLY-8956) MissingMethodPermissionsDefaultAllowedTestCase and MissingMethodPermissionsTestCase fail when run with the Elytron profile enabled

Farah Juma (JIRA) issues at jboss.org
Mon Jun 19 11:16:00 EDT 2017


     [ https://issues.jboss.org/browse/WFLY-8956?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Farah Juma updated WFLY-8956:
-----------------------------
    Summary: MissingMethodPermissionsDefaultAllowedTestCase and MissingMethodPermissionsTestCase fail when run with the Elytron profile enabled  (was: EJB3 subsystem default security domain is not propagated to secured EJBs without @SecurityDomain annotation if the default security domain is Elytron)


> MissingMethodPermissionsDefaultAllowedTestCase and MissingMethodPermissionsTestCase fail when run with the Elytron profile enabled
> ----------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: WFLY-8956
>                 URL: https://issues.jboss.org/browse/WFLY-8956
>             Project: WildFly
>          Issue Type: Bug
>          Components: EJB, Security
>            Reporter: Farah Juma
>            Assignee: Farah Juma
>            Priority: Critical
>
> Suppose a deployment with EJB with security related annotations (for example {{@RolesAllowed}}) but without a {{@SecurityDomain}} annotation. If the EAP running the deployment has attribute {{default-security-domain}} in {{/subsystem=ejb3}} defined, this will be used for any bean without security domain used in deployment. This works with PicketBox domains, however, if an Elytron security domain is defined as default, no such domain will be associated with the deployment.
> This also causes failure of {{org.jboss.as.test.integration.ejb.security.missingmethodpermission.*TestCase}} tests in integration/basic module in test suite.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list