Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@geronimo.apache.org
Message-ID: <33296139.1155684797452.JavaMail.jira@brutus>
Date: Tue, 15 Aug 2006 16:33:17 -0700 (PDT)
From: "David Jencks (JIRA)" <dev@geronimo.apache.org>
To: dev@geronimo.apache.org
Subject: [jira] Commented: (GERONIMO-2313) Subject not propagated correctly
 between web app and ejb
In-Reply-To: <24813661.1155253933821.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

    [ http://issues.apache.org/jira/browse/GERONIMO-2313?page=comments#action_12428262 ] 
            
David Jencks commented on GERONIMO-2313:
----------------------------------------

Alan agrees that this is a reasonable direction to go in to fix this problem.

G trunk rev 431706
openejb2 trunk rev 2854

Merging with 1.1 required some manual work, much of it from the TCM removal and openejb configuration work dain did.  The sample/test app attached works properly with the 1.1 modifications.

G 1.1 branch rev 431735
openejb2 2.1 branch rev 2855


> Subject not propagated correctly between web app and ejb
> --------------------------------------------------------
>
>                 Key: GERONIMO-2313
>                 URL: http://issues.apache.org/jira/browse/GERONIMO-2313
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues) 
>    Affects Versions: 1.1, 1.1.1, 1.1.x
>            Reporter: David Jencks
>         Assigned To: David Jencks
>             Fix For: 1.2
>
>         Attachments: ejbrefsec-ear-1.0-SNAPSHOT.ear, ejbrefsec.src.jar, GERONIMO-2313-openejb.diff, GERONIMO-2313.diff
>
>
> With a web app with security, that calls an ejb, isCallerInRole in the ejb always returns false.
> this is caused by the web app not setting nextCaller and the ejb interceptors shifting nextCaller to currentCaller, so when the isCallerInRole is tested there is a null subject.... so it returns false.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira