[ http://issues.apache.org/jira/browse/GERONIMO-661?page=all ]
Dain Sundstrom updated GERONIMO-661:
------------------------------------
Description:
EJBMethodPermissions.MethodSpec have incorrect serialization method. MethodSpec with parameters methodName=null, methodInterface=null, methodParam=null (that should match any method) deserializes with params methodName=null, methodInterface=null, methodParam="" (that matches any no-arg methos)!
As a result, EJB beans with all methods do not work - AccessControlException is thrown (since methodParam="" means no-arg methods, whille methodParam=null means any methods).
Here is the simple patch:
Index: EJBMethodPermission.java
===================================================================
--- EJBMethodPermission.java (revision 179589)
+++ EJBMethodPermission.java (working copy)
@@ -250,7 +250,7 @@
if (methodParams == null) {
if (methodInterface == null) {
if (methodName == null) {
- actions = ",,";
+ actions = "";
} else {
actions = methodName;
was:
EJBMethodPermissions.MethodSpec have incorrect serialization method. MethodSpec with parameters methodName=null, methodInterface=null, methodParam=null (that should match any method) deserializes with params methodName=null, methodInterface=null, methodParam="" (that matches any no-arg methos)!
As a result, EJB beans with all methods do not work - AccessControlException is thrown (since methodParam="" means no-arg methods, whille methodParam=null means any methods).
Here is the simple patch:
Index: EJBMethodPermission.java
===================================================================
--- EJBMethodPermission.java (revision 179589)
+++ EJBMethodPermission.java (working copy)
@@ -250,7 +250,7 @@
if (methodParams == null) {
if (methodInterface == null) {
if (methodName == null) {
- actions = ",,";
+ actions = "";
} else {
actions = methodName;
Version: (was: 1.0-M4)
Assign To: Jeff Genender
> "Unchecked" permissions for all EJB methods ("*") do not work
> -------------------------------------------------------------
>
> Key: GERONIMO-661
> URL: http://issues.apache.org/jira/browse/GERONIMO-661
> Project: Geronimo
> Type: Bug
> Components: specs
> Environment: Windows XP
> Reporter: Ivan Dubrov
> Assignee: Jeff Genender
>
> EJBMethodPermissions.MethodSpec have incorrect serialization method. MethodSpec with parameters methodName=null, methodInterface=null, methodParam=null (that should match any method) deserializes with params methodName=null, methodInterface=null, methodParam="" (that matches any no-arg methos)!
> As a result, EJB beans with all methods do not work - AccessControlException is thrown (since methodParam="" means no-arg methods, whille methodParam=null means any methods).
> Here is the simple patch:
> Index: EJBMethodPermission.java
> ===================================================================
> --- EJBMethodPermission.java (revision 179589)
> +++ EJBMethodPermission.java (working copy)
> @@ -250,7 +250,7 @@
> if (methodParams == null) {
> if (methodInterface == null) {
> if (methodName == null) {
> - actions = ",,";
> + actions = "";
> } else {
>
> actions = methodName;
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira