You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@shiro.apache.org by "Les Hazlewood (JIRA)" <ji...@apache.org> on 2010/05/10 21:10:30 UTC

[jira] Resolved: (SHIRO-111) Web SecurityManager should not fail in non-request usages

     [ https://issues.apache.org/jira/browse/SHIRO-111?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Les Hazlewood resolved SHIRO-111.
---------------------------------

    Fix Version/s: 1.0.0
       Resolution: Fixed

This happened to be resolved with the resolution of SHIRO-83.  The DefaultWebSecurityManager and DefaultWebSessionManager has checks to only invoke request/response-dependent methods if a Request/Response pair is accessible to the calling code.

> Web SecurityManager should not fail in non-request usages
> ---------------------------------------------------------
>
>                 Key: SHIRO-111
>                 URL: https://issues.apache.org/jira/browse/SHIRO-111
>             Project: Shiro
>          Issue Type: Improvement
>          Components: Web
>    Affects Versions: 0.9-RC1, 0.9
>            Reporter: Les Hazlewood
>             Fix For: 1.0.0
>
>
> Currently some operations of the WebSecurityManager fail if there is not a Http Request/Response pair associated with the calling thread.  The implementation should be modified to support non-request calls since a WebSecurityManager could be used in situations where there is not a request available (e.g. system bootstrap, non-http remoting from Rich client apps, etc).

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.