User: starksm 
  Date: 01/09/26 09:01:08

  Modified:    src/main/org/jboss/ejb/plugins Tag: Branch_2_4
                        SecurityInterceptor.java
  Log:
  Log the principal roles on authorization failure
  
  Revision  Changes    Path
  No                   revision
  
  
  No                   revision
  
  
  1.17.2.3  +3 -2      jboss/src/main/org/jboss/ejb/plugins/SecurityInterceptor.java
  
  Index: SecurityInterceptor.java
  ===================================================================
  RCS file: 
/cvsroot/jboss/jboss/src/main/org/jboss/ejb/plugins/SecurityInterceptor.java,v
  retrieving revision 1.17.2.2
  retrieving revision 1.17.2.3
  diff -u -r1.17.2.2 -r1.17.2.3
  --- SecurityInterceptor.java  2001/08/20 22:16:35     1.17.2.2
  +++ SecurityInterceptor.java  2001/09/26 16:01:07     1.17.2.3
  @@ -29,7 +29,7 @@
   
   @author <a href="[EMAIL PROTECTED]">Oleg Nitz</a>
   @author [EMAIL PROTECTED]
  -@version $Revision: 1.17.2.2 $
  +@version $Revision: 1.17.2.3 $
   */
   public class SecurityInterceptor extends AbstractInterceptor
   {
  @@ -209,8 +209,9 @@
           else if( realmMapping.doesUserHaveRole(principal, methodRoles) == false )
           {
               String method = mi.getMethod().getName();
  +            Set userRoles = realmMapping.getUserRoles(principal);
               String msg = "Insufficient method permissions, principal="+principal
  -                + ", method="+method+", requiredRoles="+methodRoles;
  +                + ", method="+method+", requiredRoles="+methodRoles+", 
principalRoles="+userRoles;
               Logger.error(msg);
               SecurityException e = new SecurityException(msg);
               throw new RemoteException("checkSecurityAssociation", e);
  
  
  

_______________________________________________
Jboss-development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to