[jboss-jira] [JBoss JIRA] (WFLY-7337) Introduce an authorization SPI

[David Lloyd (JIRA)]

    [ https://issues.jboss.org/browse/WFLY-7337?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13380470#comment-13380470 ] 

David Lloyd commented on WFLY-7337:
-----------------------------------

We can close this now I think, as the container can manage all these authorization checks and we are doing so presently by way of a permission check on access to the remote JTA service.

> Introduce an authorization SPI
> ------------------------------
>
>                 Key: WFLY-7337
>                 URL: https://issues.jboss.org/browse/WFLY-7337
>             Project: WildFly
>          Issue Type: Enhancement
>          Components: Transactions
>            Reporter: David Lloyd
>            Assignee: Amos Feng
>
> We need an SPI that can be invoked to authorize state changes in a transaction.  The method(s) should make it clear in some way which operation is being authorized, and it must run from the same thread as the thread which instigates the state change.
> It must be possible to register an implementation of the SPI when the container starts up or acquires the transaction manager.
> The operations that should provide authorization checks include, but are not limited to:
> * begin
> * rollback
> * prepare
> * forget
> * commit (one or two phase)
> * recover
> Thanks!



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)