[ https://issues.apache.org/jira/browse/GERONIMO-4099?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Joe Bohn updated GERONIMO-4099: ------------------------------- Fix Version/s: (was: 2.1.x) 2.1.2 Changed fix version from 2.1.x to 2.1.2 per Jarek's update indicating this was required for 2.1.2. > Calling isUserInRole wipes out run-as info > ------------------------------------------ > > Key: GERONIMO-4099 > URL: https://issues.apache.org/jira/browse/GERONIMO-4099 > Project: Geronimo > Issue Type: Bug > Security Level: public(Regular issues) > Components: Tomcat > Affects Versions: 2.0.x, 2.1.x, 2.2 > Reporter: David Jencks > Assignee: David Jencks > Fix For: 2.1.2, 2.2 > > > TomcatGeronimoRealm.hasRole sets callers which it has no business doing. > These were already set during authentication. This wipes out the run-as info > which was set earlier. Checking the principal is also unrelated to role > checks in geronimo and should be omitted. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.