Re: Merge GERONIMO-2313 into 1.1.1??

2006-08-18 Thread Jim Jagielski
Will there be a summary of the IRC discussion posted onlist? On Aug 16, 2006, at 12:31 PM, Matt Hogstrom wrote: After agonizing over this on IRC let's put in 2313. Close the door and start testing. David Jencks wrote: GERONIMO-2313 is a fairly serious security problem: basically ejb

Merge GERONIMO-2313 into 1.1.1??

2006-08-16 Thread David Jencks
GERONIMO-2313 is a fairly serious security problem: basically ejb security is totally broken when the ejb is called from a web app. I think this could be merged easily from the 1.1 branch into 1.1.1, however it requires openejb changes as well. Alan suggested that since 1.1.1 is already

Re: Merge GERONIMO-2313 into 1.1.1??

2006-08-16 Thread Matt Hogstrom
After agonizing over this on IRC let's put in 2313. Close the door and start testing. David Jencks wrote: GERONIMO-2313 is a fairly serious security problem: basically ejb security is totally broken when the ejb is called from a web app. I think this could be merged easily from the 1.1