You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@qpid.apache.org by "Robbie Gemmell (JIRA)" <ji...@apache.org> on 2014/02/28 13:33:22 UTC

[jira] [Updated] (QPID-5567) [Java Broker] Remove SecurityManager "CurrentSubject" thread local, and always use the subject from the current AccessControlContext

     [ https://issues.apache.org/jira/browse/QPID-5567?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robbie Gemmell updated QPID-5567:
---------------------------------

    Fix Version/s: 0.27

> [Java Broker] Remove SecurityManager "CurrentSubject" thread local, and always use the subject from the current AccessControlContext
> ------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: QPID-5567
>                 URL: https://issues.apache.org/jira/browse/QPID-5567
>             Project: Qpid
>          Issue Type: Improvement
>          Components: Java Broker
>            Reporter: Rob Godfrey
>            Assignee: Robbie Gemmell
>             Fix For: 0.27
>
>
> Rather than invent our own security context, we should use the one Java provides.
> Moreover since we perform security checks based on the Connection and Session of the user, we should add these as "Principals" of the current subject.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org