Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@geronimo.apache.org
Message-ID: <10962416.1155254174331.JavaMail.jira@brutus>
Date: Thu, 10 Aug 2006 16:56:14 -0700 (PDT)
From: "David Jencks (JIRA)" <dev@geronimo.apache.org>
To: dev@geronimo.apache.org
Subject: [jira] Updated: (GERONIMO-2313) Subject not propagated correctly
 between web app and ejb
In-Reply-To: <24813661.1155253933821.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

     [ http://issues.apache.org/jira/browse/GERONIMO-2313?page=all ]

David Jencks updated GERONIMO-2313:
-----------------------------------

    Attachment: ejbrefsec.src.jar
                ejbrefsec-ear-1.0-SNAPSHOT.ear

Sample app to demonstrate the problem, together with m2 project source.

Deploy the ear.

visit 

localhost:8080/manifestcp/servlet in your browser

Look on the server console: it will tell you the result of isCallerInRole for each ejb access. false means isCallerInRole is not working properly.

> Subject not propagated correctly between web app and ejb
> --------------------------------------------------------
>
>                 Key: GERONIMO-2313
>                 URL: http://issues.apache.org/jira/browse/GERONIMO-2313
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues) 
>    Affects Versions: 1.1, 1.1.1, 1.1.x
>            Reporter: David Jencks
>         Assigned To: David Jencks
>             Fix For: 1.2
>
>         Attachments: ejbrefsec-ear-1.0-SNAPSHOT.ear, ejbrefsec.src.jar
>
>
> With a web app with security, that calls an ejb, isCallerInRole in the ejb always returns false.
> this is caused by the web app not setting nextCaller and the ejb interceptors shifting nextCaller to currentCaller, so when the isCallerInRole is tested there is a null subject.... so it returns false.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira