[jira] Closed: (OPENEJB-1015) javax.ejb.EJBContext.getCallerPrincipal() not predictable

["David Blevins (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/OPENEJB-1015?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Blevins closed OPENEJB-1015.
----------------------------------

    Resolution: Fixed

$ svn ci 
Sending        assembly/openejb-tomcat/openejb-tomcat-catalina/src/main/java/org/apache/openejb/tomcat/catalina/TomcatSecurityService.java
Sending        container/openejb-core/src/main/java/org/apache/openejb/core/security/AbstractSecurityService.java
Sending        container/openejb-core/src/main/java/org/apache/openejb/core/security/jaas/UserPrincipal.java
Adding         container/openejb-core/src/main/java/org/apache/openejb/spi/CallerPrincipal.java
Sending        container/openejb-core/src/main/java/org/apache/openejb/spi/SecurityService.java
Transmitting file data .....
Committed revision 762564.



> javax.ejb.EJBContext.getCallerPrincipal() not predictable
> ---------------------------------------------------------
>
>                 Key: OPENEJB-1015
>                 URL: https://issues.apache.org/jira/browse/OPENEJB-1015
>             Project: OpenEJB
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 3.0-beta-1, 3.0-beta-2, 3.0, 3.1
>            Reporter: David Blevins
>            Assignee: David Blevins
>             Fix For: 3.1.1
>
>
> The result of getCallerPrincipal can be random depending on list order.  Code has been reworked so that JAAS Implementations may annotate the principal implementations with @CallerPrincipal to tell the org.apache.openejb.spi.SecurityService which principal to return from getCallerPrincipal.
> Annotation used instead of an interface so that JAAS LoginModules can avoid a mandatory runtime dependency on any OpenEJB libraries.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.