You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by "David Jencks (JIRA)" <de...@geronimo.apache.org> on 2005/07/10 05:23:11 UTC

[jira] Closed: (GERONIMO-661) "Unchecked" permissions for all EJB methods ("*") do not work

     [ http://issues.apache.org/jira/browse/GERONIMO-661?page=all ]
     
David Jencks closed GERONIMO-661:
---------------------------------

    Fix Version: 1.0-M4
     Resolution: Fixed
      Assign To: David Jencks  (was: Jeff Genender)

Applied patch and added some tests.  Many thanks!!

> "Unchecked" permissions for all EJB methods ("*") do not work
> -------------------------------------------------------------
>
>          Key: GERONIMO-661
>          URL: http://issues.apache.org/jira/browse/GERONIMO-661
>      Project: Geronimo
>         Type: Bug
>   Components: specs
>  Environment: Windows XP
>     Reporter: Ivan Dubrov
>     Assignee: David Jencks
>      Fix For: 1.0-M4

>
> EJBMethodPermissions.MethodSpec have incorrect serialization method. MethodSpec with parameters methodName=null, methodInterface=null, methodParam=null (that should match any method) deserializes with params methodName=null, methodInterface=null, methodParam="" (that matches any no-arg methos)! 
> As a result, EJB beans with all methods <unchecked/> do not work - AccessControlException is thrown (since methodParam="" means no-arg methods, whille methodParam=null means any methods).
> Here is the simple patch:
> Index: EJBMethodPermission.java
> ===================================================================
> --- EJBMethodPermission.java	(revision 179589)
> +++ EJBMethodPermission.java	(working copy)
> @@ -250,7 +250,7 @@
>              if (methodParams == null) {
>                  if (methodInterface == null) {
>                      if (methodName == null) {
> -                        actions = ",,";
> +                        actions = "";
>                      } else {
>  
>                          actions = methodName;

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira