You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by "David Jencks (JIRA)" <ji...@apache.org> on 2009/02/04 00:51:59 UTC
[jira] Commented: (GERONIMO-4526) ejbTimout method not subject to
permission checks
[ https://issues.apache.org/jira/browse/GERONIMO-4526?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12670180#action_12670180 ]
David Jencks commented on GERONIMO-4526:
----------------------------------------
branches/2.1 fixed in rev 740521
> ejbTimout method not subject to permission checks
> -------------------------------------------------
>
> Key: GERONIMO-4526
> URL: https://issues.apache.org/jira/browse/GERONIMO-4526
> Project: Geronimo
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: OpenEJB
> Affects Versions: 2.1.4, 2.2
> Reporter: David Jencks
> Assignee: David Jencks
> Fix For: 2.1.4, 2.2
>
>
> Right now if you have security enabled ejbTimeout calls don't work, they get an unauth exception.
> Need to fix it so the permissions that aren't from an interface get into the unchecked permissions. If someone adds the ejbTimeout method to an interface, that will get a different permission so the new unchecked permission shouldn't allow unwanted access.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.