You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jetspeed-dev@portals.apache.org by "Ate Douma (JIRA)" <je...@portals.apache.org> on 2011/05/11 17:27:47 UTC
[jira] [Commented] (JS2-589) PermissionManagerImpl use of
ThreadLocal for caching causes inconsistent results
[ https://issues.apache.org/jira/browse/JS2-589?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13031780#comment-13031780 ]
Ate Douma commented on JS2-589:
-------------------------------
I'll implement the ThreadLocal cleanup on ServletRequest using the new ServletRequestCleanupService from JS2-1253
> PermissionManagerImpl use of ThreadLocal for caching causes inconsistent results
> --------------------------------------------------------------------------------
>
> Key: JS2-589
> URL: https://issues.apache.org/jira/browse/JS2-589
> Project: Jetspeed 2
> Issue Type: Bug
> Components: Security
> Affects Versions: 2.1-dev
> Environment: java 1.5, oracle, any OS
> Reporter: Ethan Adams
> Assignee: Ate Douma
> Priority: Critical
> Fix For: 2.2.2
>
>
> PermissionManagerImpl uses ThreadLocal for permission caching. This means that once the permissions are loaded for one thread (ex. thread 1), they are there until someone changes the permissions using the PermissionManager (on that thread). If permissions are edited on another thread (thread 2), thread 1 never gets updated. So permissions are inconsistent until the portal is restarted.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org