Mailing-List: contact users-help@openejb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@openejb.apache.org
Received-SPF: neutral (nike.apache.org: local policy)
MIME-Version: 1.0
In-Reply-To: <1297160656820-3275679.post@n4.nabble.com>
References: <1296717849351-3257408.post@n4.nabble.com>
	<AANLkTinE8tqjNJh5qHmbgSA4ATeazDHi+P9QcW9yZuOY@mail.gmail.com>
	<1296744081018-3258218.post@n4.nabble.com>
	<AANLkTi=uZA6n6gLAyb9zcAKhxTkHbrviV65myCo2712i@mail.gmail.com>
	<1296833876039-3260388.post@n4.nabble.com>
	<AANLkTiks5iwR7X8XT_xU1=UL6vBkt_u416gArbnYdifV@mail.gmail.com>
	<1297160656820-3275679.post@n4.nabble.com>
Date: Tue, 8 Feb 2011 08:05:37 -0400
Message-ID: <AANLkTinXSCdK8pQgKJ7C32fyRudaHSPLfkhmuf0E2YdN@mail.gmail.com>
Subject: Re: JUnit: Sessioncontext.isCallerInRole allways returns false
From: Thiago Veronezi <thiago@veronezi.org>
To: users@openejb.apache.org
Content-Type: multipart/alternative; boundary=001636284298999307049bc42acc

--001636284298999307049bc42acc
Content-Type: text/plain; charset=ISO-8859-1

Hi!
It seems that you just found a bug. :O) If you add a dummy method with the
"RolesAllowed" annotation, your methods get back to work. I've changed the
example to fit your needs. Ill investigate this problem later today, in the
meantime you can use this workaround. Check the new example here:

http://people.apache.org/~tveronezi/security.zip

[]s,
Thiago

On Tue, Feb 8, 2011 at 6:24 AM, ndegraev <nick.degraeve@telenet.be> wrote:

>
> Thanks for the project. When I run it's as expected.
>
> Now I'm trying to apply your examples on my test project and it fails. I
> don't know why. It's probably something small but I just don't see it. Can
> you have a look?
>
> MyTest.java:
>
> @Local
> public interface MyTest {
>
>    boolean hasRole(String role);
>
>    boolean isCallerAdmin();
>
> }
>
> MyTestBean.java:
>
> @Stateless
> public class MyTestBean implements MyTest {
>
>    @Resource
>    private SessionContext sessionContext;
>
>    public boolean hasRole(final String role) {
>        return this.sessionContext.isCallerInRole(role);
>    }
>
>    public boolean isCallerAdmin() {
>        return this.sessionContext.isCallerInRole("admins");
>    }
>
> }
>
> MyTestCase.java:
>
> public class MyTestCase {
>
>    @Before
>    public void setUp() throws Exception {
>         final ClassLoader contextClassLoader =
> Thread.currentThread().getContextClassLoader();
>        final URL resource = contextClassLoader.getResource("login.config");
>         System.setProperty("java.security.auth.login.config",
> resource.toExternalForm());
>
>         final Properties properties = new Properties();
>         properties.setProperty("openejb.authentication.realmName",
> "PropertiesLogin");
>        new InitialContext(properties);
>    }
>
>    @Test
>    public void test1() throws NamingException {
>        System.out.println("test 1...");
>        final Context ctx = getCtx("user", "user_pass");
>        final MyTest myTest = (MyTest) ctx.lookup("MyTestBeanLocal");
>        System.out.println("Is admin? " + myTest.isCallerAdmin());
>        System.out.println("Is in 'admins'? " + myTest.hasRole("admins"));
>        System.out.println("Is in 'users'? " + myTest.hasRole("users"));
>    }
>
>    @Test
>    public void test2() throws NamingException {
>        System.out.println("test 2...");
>        final Context ctx = getCtx("admin", "admin_pass");
>        final MyTest myTest = (MyTest) ctx.lookup("MyTestBeanLocal");
>        System.out.println("Is admin? " + myTest.isCallerAdmin());
>        System.out.println("Is in role 'admins'? " +
> myTest.hasRole("admins"));
>        System.out.println("Is in role 'users'? " +
> myTest.hasRole("users"));
>    }
>
>    private Context getCtx(final String user, final String pass) throws
> NamingException {
>         final Properties properties = new Properties();
>         properties.setProperty(Context.SECURITY_PRINCIPAL, user);
>        properties.setProperty(Context.SECURITY_CREDENTIALS, pass);
>        return new InitialContext(properties);
>    }
>
> }
>
> groups.properties, users.properties, login.config and jndi.properties are
> copied over from your project.
>
> When I run it I get this output:
>
> Apache OpenEJB 3.1.4    build: 20101112-03:32
> http://openejb.apache.org/
> INFO - openejb.home = C:\dvl\test-openejb
> INFO - openejb.base = C:\dvl\test-openejb
> INFO - Configuring Service(id=Default Security Service,
> type=SecurityService, provider-id=Default Security Service)
> INFO - Configuring Service(id=Default Transaction Manager,
> type=TransactionManager, provider-id=Default Transaction Manager)
> INFO - Found EjbModule in classpath: C:\dvl\test-openejb\target\classes
> INFO - Beginning load: C:\dvl\test-openejb\target\classes
> INFO - Configuring enterprise application: classpath.ear
> INFO - Configuring Service(id=Default Stateless Container, type=Container,
> provider-id=Default Stateless Container)
> INFO - Auto-creating a container for bean MyTestBean:
> Container(type=STATELESS, id=Default Stateless Container)
> INFO - Using 'openejb.validation.output.level=VERBOSE'
> INFO - Enterprise application "classpath.ear" loaded.
> INFO - Assembling app: classpath.ear
> INFO - Jndi(name=MyTestBeanLocal) --> Ejb(deployment-id=MyTestBean)
> INFO - Created Ejb(deployment-id=MyTestBean, ejb-name=MyTestBean,
> container=Default Stateless Container)
> INFO - Deployed Application(path=classpath.ear)
> test 1...
> INFO - Logging in
> Is admin? false
> Is in 'admins'? false
> Is in 'users'? false
> test 2...
> INFO - Logging in
> Is admin? false
> Is in role 'admins'? false
> Is in role 'users'? false
> --
> View this message in context:
> http://openejb.979440.n4.nabble.com/JUnit-Sessioncontext-isCallerInRole-allways-returns-false-tp3257408p3275679.html
> Sent from the OpenEJB User mailing list archive at Nabble.com.
>

--001636284298999307049bc42acc--