[jboss-user] [Security & JAAS/JBoss] - Re: Concurrency bug in JaasSecurityManager

[Cyberax]

It doesn't perform deep copy of Subjects, so the copied subject shares its role collection with the original subject.

Deep copy is controlled by the flag which is never set to 'true':

  | /** The flag to indicate that the Subject sets need to be deep copied*/
  |    private boolean deepCopySubjectOption = false;
  | 


View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992479#3992479

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3992479