shiro-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Maison (JIRA)" <j...@apache.org>
Subject [jira] [Created] (SHIRO-420) Allow a configurable strategy to backup runAs() informations
Date Sat, 02 Mar 2013 09:03:12 GMT
Maison created SHIRO-420:
----------------------------

             Summary: Allow a configurable strategy to backup runAs() informations
                 Key: SHIRO-420
                 URL: https://issues.apache.org/jira/browse/SHIRO-420
             Project: Shiro
          Issue Type: Improvement
          Components: Configuration
    Affects Versions: 1.2.1
            Reporter: Maison


Subject.runAs() saves current subject principal in a stack into user session ; this saved
information will be popped by Subject.releaseRunAs().
Thus Subject.runAs() is not usable with the noSessionFilter.
Use of session may not always be desirable (in case of stateless web application where no
session should be created).

Alternatively it would be interesting to be able to configure the way runAs() informations
are saved.
A RunAsManager (or something similar) in the SecurityManager that could be consulted for runAs
operations. Then you could plug in a persistence strategy, whether it be via the session or
something else.


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message