Mailing-List: contact user-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@geronimo.apache.org
Received-SPF: pass (athena.apache.org: local policy)
Message-ID: <20080617213508.iwhz7tl9ssw8o8cc@webmail.nimra.no>
Date: Tue, 17 Jun 2008 21:35:08 +0200
From: Stig Even Larsen <stig@nimra.no>
To: user@geronimo.apache.org
Subject: Re: request.isUserInRole("some-role") always return false after
	@EJB injection
References: <48565415.5070600@nimra.no> <48565542.3000407@nimra.no>
	<9B5B097D-2A2E-48F0-A058-21628A042F14@gmail.com>
	<F99FF8EC-4DF8-45B6-98DB-9F2539DA9127@yahoo.com>
	<20080616213003.cy9yyb3zksosoowo@webmail.nimra.no>
	<1BB751C4-A1E1-42A0-AB9D-6683E7F43D5E@yahoo.com>
	<20080616221128.tujgi001cows4ck0@webmail.nimra.no>
	<1290BCB0-5E2B-401C-8113-C576023D71F4@yahoo.com>
	<485762A7.3010100@nimra.no>
	<E62C8A60-B812-4389-9006-0762D69028C8@yahoo.com>
	<48577179.2040808@nimra.no> <4857AA5D.6060608@nimra.no>
In-Reply-To: <4857AA5D.6060608@nimra.no>
MIME-Version: 1.0
Content-Type: text/plain;
	charset=ISO-8859-1;
	DelSp="Yes";
	format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
User-Agent: Internet Messaging Program (IMP) H3 (4.1)

Quoting Stig Even Larsen <stig@nimra.no>:

> Stig Even Larsen wrote:
>> David Jencks wrote:
>>>
>>> On Jun 17, 2008, at 12:07 AM, Stig Even Larsen wrote:
>>>
>>>>
>>>> David Jencks wrote:
>>>>> On Jun 16, 2008, at 1:11 PM, Stig Even Larsen wrote:
>>>>>> Quoting David Jencks <david_jencks@yahoo.com>:
>>>>>>
>>>>>>>
>>>>>>> On Jun 16, 2008, at 12:30 PM, Stig Even Larsen wrote:
>>>>>>>
>>>>>>>>
>>>>>>>> Quoting David Jencks <david_jencks@yahoo.com>:
>>>>>>>>
>>>>>>>>>
>>>>>>>>> On Jun 16, 2008, at 10:12 AM, Kevan Miller wrote:
>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> On Jun 16, 2008, at 7:57 AM, Stig Even Larsen wrote:
>>>>>>>>>>
>>>>>>>>>>> I forgot to tell that I'm using Geronimo 2.0.2 on Debian Etch.
>>>>>>>>>>>
>>>>>>>>>>> Regards,
>>>>>>>>>>> Stig Even Larsen
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> Stig Even Larsen wrote:
>>>>>>>>>>>> Hi,
>>>>>>>>>>>> After logging in via the j_security_check form I use the  =20
>>>>>>>>>>>>  simplest  of jsp  page for testing purpose. I've defined =20
>>>>>>>>>>>>   several roles and  am able to check this via   =20
>>>>>>>>>>>> request.isUserInRole("some-role").  Everything is working =20
>>>>>>>>>>>>  as expected.
>>>>>>>>>>>> When I throw in a EJB via @EJB annotation or via JNDI  =20
>>>>>>>>>>>> lookup  request.isUserInRole("some-role") is now always  =20
>>>>>>>>>>>> returning false.
>>>>>>>>>>>> Is this a bug or I'm I missing something here?
>>>>>>>>>>
>>>>>>>>>> Hi Stig,
>>>>>>>>>> I think you've run into a bug, which was recently fixed  =20
>>>>>>>>>> (revision   number 663484 for branches/2.0).
>>>>>>>>>>
>>>>>>>>>> The nightly build of 2.0.3-SNAPSHOT should contain the fix. =20
>>>>>>>>>>   You'll  find some binaries here --    =20
>>>>>>>>>> http://people.apache.org/builds/geronimo/server/binaries/2.0/2008=
0616/
>>>>>>>>>
>>>>>>>>> Just for tracking purposes this is GERONIMO-4099.  This was the bu=
g
>>>>>>>>> that came to my mind first also, but I'm not convinced it's the sa=
me
>>>>>>>>> problem.  Please let us know whether the 2.0.3 snapshot fixes the
>>>>>>>>> problem you are seeing.
>>>>>>>>>
>>>>>>>>> thanks
>>>>>>>>> david jencks
>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> --kevan
>>>>>>>>
>>>>>>>> Hi,
>>>>>>>>
>>>>>>>> Thanks for your reply.
>>>>>>>> Is this also an issue with 2.1.x?
>>>>>>>
>>>>>>> GERONIMO-4099 was an issue with 2.0.x, 2.1.x, and trunk (2.2-SNAPSHO=
T).
>>>>>>> I fixed it in all branches at the same time.  Any progress on seeing
>>>>>>> if it is the problem you are running into?
>>>>>>
>>>>>> Well, I'm struggeling finding an "upgrade routine". Is there any?
>>>>>> Anyway, since I'm at CET time (GMT+1) I probably won't be able  =20
>>>>>> to doing a test
>>>>>> until working hours tomorrow...
>>>>> I'm not sure what you are looking for.  There is no way to  =20
>>>>> upgrade a geronimo installation from one version of geronimo to  =20
>>>>> another "in place": you have to redeploy your applications on  =20
>>>>> the new server.  On the other hand I recommend a maven based  =20
>>>>> workflow to build a customized server including your apps, in  =20
>>>>> which case you'd just change the geronimo version in the  =20
>>>>> appropriate pom.
>>>>> http://cwiki.apache.org/GMOxDOC21/constructing-a-special-purpose-serve=
r-using-maven.html  =20
>>>>> thanks
>>>>> david jencks
>>>>>>
>>>>>>
>>>>>>>
>>>>>>> replying to the list will get you more responses in case I'm  =20
>>>>>>> not around :-)
>>>>>>> thanks
>>>>>>> david jencks
>>>>>>
>>>>>> Sorry about that, won't happen agein ;)
>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> Regards,
>>>>>>>> Stig Even Larsen
>>>>>>
>>>>>> Regards,
>>>>>> Stig Even Larsen
>>>>>>
>>>> Hi again,
>>>>
>>>> In the 2.0.3 SNAPSHOT of 20080616 the malfunction is still there. =20
>>>>  It seems that this issue is not the same as described in  =20
>>>> GERONIMO-4099.
>>>> I think is time to file a detailed bug-report?
>>>
>>> That would be great!  If you can provide a small app showing the  =20
>>> problem or at least the servlet code that would be good.  I've  =20
>>> just been looking at a similar case that works where there is a  =20
>>> servlet and ejb, and the isUser/CallerinRole methods work: in the  =20
>>> case I have, the servlet tests before calling the ejb and not  =20
>>> after calling the ejb.  Maybe you are testing in the servlet after =20
>>>  calling the ejb?
>>>
>>> thanks!
>>> david jencks
>>>
>>>>
>>>>
>>>> Best regards,
>>>> Stig Even Larsen
>>
>> Hi David,
>>
>> I've noticed something odd. After first login (first login after  =20
>> deployment) the request.isUserInRole(xxx) returns false. If a  =20
>> reload the page (eg. calling the servlet again) it returns true. If =20
>>  I then invalidate the session and login in again it returns true  =20
>> (it behaves normally).
>> So it is infact working :) I'll be filing that bugreport anyway so  =20
>> you can test it. It will be submitted within the next 1/2 hour.
>>
>> Best regards,
>> Stig Even Larsen
>
> Hi again,
>
> It seems that its partially working in 2.0.2 also which means that the
> GERONIMO-4099 has nothing to do in this scenario. I've posted
> GERONIMO-4119 as a new bug.
>
> Best regards,
> Stig Even Larsen

Hi David,

Will your fix (rev 668765) be available in tonights 2.0.3 SNAPSHOT?

Best regards,
Stig Even Larsen