Return-Path: 
 <issues-return-10717-apmail-cxf-issues-archive=cxf.apache.org@cxf.apache.org>
Delivered-To: apmail-cxf-issues-archive@www.apache.org
Received: (qmail 22543 invoked from network); 17 Jul 2009 19:43:43 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
  by minotaur.apache.org with SMTP; 17 Jul 2009 19:43:43 -0000
Received: (qmail 30085 invoked by uid 500); 17 Jul 2009 19:44:45 -0000
Delivered-To: apmail-cxf-issues-archive@cxf.apache.org
Received: (qmail 29956 invoked by uid 500); 17 Jul 2009 19:44:45 -0000
Mailing-List: contact issues-help@cxf.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:issues-help@cxf.apache.org>
List-Unsubscribe: <mailto:issues-unsubscribe@cxf.apache.org>
List-Post: <mailto:issues@cxf.apache.org>
List-Id: <issues.cxf.apache.org>
Reply-To: dev@cxf.apache.org
Delivered-To: mailing list issues@cxf.apache.org
Received: (qmail 29910 invoked by uid 99); 17 Jul 2009 19:44:39 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 17 Jul 2009 19:44:39 +0000
X-ASF-Spam-Status: No, hits=-2000.0 required=10.0
	tests=ALL_TRUSTED
X-Spam-Check-By: apache.org
Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 17 Jul 2009 19:44:36 +0000
Received: from brutus (localhost [127.0.0.1])
	by brutus.apache.org (Postfix) with ESMTP id E0CF1234C046
	for <issues@cxf.apache.org>; Fri, 17 Jul 2009 12:44:14 -0700 (PDT)
Message-ID: <1947339958.1247859854919.JavaMail.jira@brutus>
Date: Fri, 17 Jul 2009 12:44:14 -0700 (PDT)
From: "Sergey Beryozkin (JIRA)" <jira@apache.org>
To: issues@cxf.apache.org
Subject: [jira] Commented: (CXF-2345) Returning AOP/CGLIB proxy as
 Subresource throws Fault "object is not an instance of declaring class"
In-Reply-To: <805310334.1247793434949.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394
X-Virus-Checked: Checked by ClamAV on apache.org


    [ https://issues.apache.org/jira/browse/CXF-2345?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12732698#action_12732698 ] 

Sergey Beryozkin commented on CXF-2345:
---------------------------------------

Hi,

> In fact, my use case is that the rootresource class itself is secured, so I guess that means in my specific use case, there's actually no need to protect any of its methods and its subresources, is my assumption is correct? 

If your global root resource security rules apply to all 'leafs'/subresources, then yes, no need to secure the subresources or individual methods. One may want to do apply more fine-grained authorization rules in other cases.

I'll update the docs, there's so much that has to be added...
thanks, Sergey  

> Returning AOP/CGLIB proxy as Subresource throws Fault "object is not an instance of declaring class"
> ----------------------------------------------------------------------------------------------------
>
>                 Key: CXF-2345
>                 URL: https://issues.apache.org/jira/browse/CXF-2345
>             Project: CXF
>          Issue Type: Bug
>          Components: REST
>    Affects Versions: 2.2.2
>            Reporter: Hendy Irawan
>            Assignee: Sergey Beryozkin
>             Fix For: 2.2.3, 2.3
>
>
> Test case:
> RootResource.java :
> public class RootResource {
>   @Path("subresource")
>   public abstract SubResource getSubResource();
> }
> In spring-beans.xml:
> <bean class="RootResource">
>   <lookup-method name="getSubResource" bean="subResource" />
> </bean>
> <bean id="subResource" class="SubResource" />
> Then the AOP proxied SubResource:
> @RolesAllowed({"ROLE_USER"}) // activate Spring Security global method annotations
> public class SubResource {
> }
> Getting the /subresource will throw exception:
> org.apache.cxf.interceptor.Fault: object is not an instance of declaring class while invoking
> Tried this workaround but not working: Make SubResource implement an interface then on RootResource.getSubResource() use interface as the return type, not the class

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.