cxf-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "metatech (JIRA)" <j...@apache.org>
Subject [jira] [Created] (CXF-5864) Anonymous users have no permissions since 2.6.3
Date Wed, 09 Jul 2014 10:04:04 GMT
metatech created CXF-5864:
-----------------------------

             Summary: Anonymous users have no permissions since 2.6.3
                 Key: CXF-5864
                 URL: https://issues.apache.org/jira/browse/CXF-5864
             Project: CXF
          Issue Type: Bug
    Affects Versions: 2.6.3
            Reporter: metatech


Since CXF-4495 (contained in CXF 2.6.3), anonymous users do no have any permissions anymore.
The method "handleMessage" of the class "AbstractAuthorizingInInterceptor" now checks that
the UserPrincipal is not null.
Any call results now into a AccessDeniedException.

[code]
Caused by: org.apache.cxf.interceptor.security.AccessDeniedException: Unauthorized
	at org.apache.cxf.interceptor.security.AbstractAuthorizingInInterceptor.handleMessage(AbstractAuthorizingInInterceptor.java:57)
~[cxf-rt-core-2.6.3.jar:2.6.3]
[code]




--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message