rzo1 opened a new pull request, #3081: URL: https://github.com/apache/tomee/pull/3081
Only the resource class was consulted for class-level @RolesAllowed/@PermitAll/@DenyAll, so methods inherited from an annotated base class were unprotected. Following Jakarta Annotations, a method-level annotation wins, otherwise the class declaring the method applies. Based on #3068 and will retarget to main once it is merged. Fixes TOMEE-4730. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
