You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tomee.apache.org by "Luis Fernando Planella Gonzalez (JIRA)" <ji...@apache.org> on 2008/08/21 21:48:44 UTC

[jira] Created: (OPENEJB-902) TomcatSecurityService should delegate isCallerInRole to Realm

TomcatSecurityService should delegate isCallerInRole to Realm
-------------------------------------------------------------

                 Key: OPENEJB-902
                 URL: https://issues.apache.org/jira/browse/OPENEJB-902
             Project: OpenEJB
          Issue Type: Bug
          Components: tomcat
    Affects Versions: 3.0
         Environment: Ubuntu Linux 8.04, i386
            Reporter: Luis Fernando Planella Gonzalez


Since TomcatSecurityManager uses a Tomcat Realm to authenticate users, it is also expected that it override the isCallerInRole() method to delegate to Realm.hasRole() method.
Perhaps the isCallerAuthorized() method should be overridden too, using the same idea.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (OPENEJB-902) TomcatSecurityService should delegate isCallerInRole to Realm

Posted by "David Blevins (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/OPENEJB-902?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Blevins updated OPENEJB-902:
----------------------------------

        Fix Version/s: (not version related)
    Affects Version/s:     (was: 3.0)
                       (trunk/openejb3)

> TomcatSecurityService should delegate isCallerInRole to Realm
> -------------------------------------------------------------
>
>                 Key: OPENEJB-902
>                 URL: https://issues.apache.org/jira/browse/OPENEJB-902
>             Project: OpenEJB
>          Issue Type: Bug
>          Components: tomcat
>    Affects Versions: (trunk/openejb3)
>         Environment: Ubuntu Linux 8.04, i386
>            Reporter: Luis Fernando Planella Gonzalez
>             Fix For: (not version related)
>
>
> Since TomcatSecurityManager uses a Tomcat Realm to authenticate users, it is also expected that it override the isCallerInRole() method to delegate to Realm.hasRole() method.
> Perhaps the isCallerAuthorized() method should be overridden too, using the same idea.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Resolved: (OPENEJB-902) TomcatSecurityService should delegate isCallerInRole to Realm

Posted by "Luis Fernando Planella Gonzalez (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/OPENEJB-902?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Luis Fernando Planella Gonzalez resolved OPENEJB-902.
-----------------------------------------------------

    Resolution: Invalid

The delegation to realm is done under the hood, so, this issue is invalid

> TomcatSecurityService should delegate isCallerInRole to Realm
> -------------------------------------------------------------
>
>                 Key: OPENEJB-902
>                 URL: https://issues.apache.org/jira/browse/OPENEJB-902
>             Project: OpenEJB
>          Issue Type: Bug
>          Components: tomcat
>    Affects Versions: 3.0
>         Environment: Ubuntu Linux 8.04, i386
>            Reporter: Luis Fernando Planella Gonzalez
>
> Since TomcatSecurityManager uses a Tomcat Realm to authenticate users, it is also expected that it override the isCallerInRole() method to delegate to Realm.hasRole() method.
> Perhaps the isCallerAuthorized() method should be overridden too, using the same idea.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.