[ http://jira.jboss.com/jira/browse/JBAS-69?page=history ]
Scott M Stark resolved JBAS-69:
-------------------------------
Resolution: Done
The ejbTimer dispatch layer now establishes an anonymous identity and the
container allows unchecked access to the ejbTimeout method.
> EJB Timer Service broken when used with security domain
> -------------------------------------------------------
>
> Key: JBAS-69
> URL: http://jira.jboss.com/jira/browse/JBAS-69
> Project: JBoss Application Server
> Type: Bug
> Components: EJBs
> Versions: JBossAS-4.0.0 Final
> Reporter: Scott M Stark
> Assignee: Scott M Stark
> Priority: Critical
> Fix For: JBossAS-4.0.1 Final
>
> Original Estimate: 2 hours
> Remaining: 2 hours
>
> When an EJB (an entity bean in my case) has a security
> domain associated with it, calls to the ejbTimeout
> method fail with a SecurityException (insufficient method
> permissions). It appears the principal is being hardcoded
> to null in the TimedObjectInvoker, causing the security
> check to fail in the SecurityInterceptor. I have tried
> setting the method permissions for ejbTimeout to
> unchecked, but these aren't picked up, possibly because
> ejbTimeout is not a member of the bean's local
> interface.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
If you want more information on JIRA, or have a bug to report see:
http://www.atlassian.com/software/jira
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
JBoss-Development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-development
