[jBoss-Dev] Security: beanPrincipal isn't cleared

[Harald Gliebe]

Hi,

getCallerPrincipal returns always the same Principal after one has logged
in.
The reason is, that the mapped Principal (beanPrincipal) is cached in
EnterpriseContext, but not cleared in the clear() - method.

The following patch worked for me.

--- EnterpriseContext.java~     Thu Nov 16 20:00:40 2000
+++ EnterpriseContext.java      Thu Nov 16 20:00:41 2000
@@ -144,10 +144,11 @@
    public void clear() {
    
     this.id = null;
     this.locked = 0;
     this.principal = null;
+    this.beanPrincipal=null;
     this.synch = null;
     this.transaction = null;
    
    }


Can someone update it in CVS ?

Regards,

Harald Gliebe