[jboss-jira] [JBoss JIRA] (WFLY-8414) EJBContext.getCallerPrincipal behaves differently in Elytron and legacy security
Josef Cacek (JIRA)
issues at jboss.org
Tue Mar 21 11:23:02 EDT 2017
Josef Cacek created WFLY-8414:
---------------------------------
Summary: EJBContext.getCallerPrincipal behaves differently in Elytron and legacy security
Key: WFLY-8414
URL: https://issues.jboss.org/browse/WFLY-8414
Project: WildFly
Issue Type: Bug
Components: EJB, Security
Reporter: Josef Cacek
Assignee: Darran Lofthouse
The {{EJBContext.getCallerPrincipal()}} used in unsecured EJB method returns "anonymous" (i.e. unauthenticatedIdentity) in legacy security and it returns authenticated user-name when the default security domain ("other") is mapped to Elytron.
This could complicate users migration from legacy security to Elytron.
I'm not sure if this behavior was intended or if it's just a problem of how the Elytron default domain mapping works in ejb3 subsystem.
If the current {{getCallerPrincipal}} behavior is correct, then we should either reuse this JIRA for Documentation changes (especially Migration guide) or close this and create a new Documentation one.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
More information about the jboss-jira
mailing list