Hi All,
Is the below issue completely and utterly uninteresting and boring, or should I just go ahead and file a bugreport?
Regards, Michiel ------------------------------------------------------------ We've been tracking a nasty issue in our web application when using Tomcat 5.0.28 and JSTL. If we call a method from JSTL, any code that tries to access the AccessControlContext behaves differently than it would if called directly in a JSP using plain java. e.g. If we have a utility method in our dataBean that returns the (JAAS) Subject using Subject.getSubject(AccessController.getContext()), the syntax: <%= dataBean.getSubjectFromContext() %> returns the Subject whereas: ${dataBean.subjectFromContext} returns null This is quite unexpected behaviour and seems to be caused by the call to: org.apache.jasper.runtime.PageContextImpl.proprietaryEvaluate(PageContextImpl.java:880) which uses AccessController.doPrivileged(PrivilegedExceptionAction) rather than AccessController.doPrivileged(PrivilegedExceptionAction, AccessControlContext) to evaluate the EL syntax. I think that changing: retValue = AccessController.doPrivileged( new PrivilegedExceptionAction(){ ..... } ); To: retValue = AccessController.doPrivileged( new PrivilegedExceptionAction(){ ..... }, AccessController.getContext() ); should solve this. Can someone please have a look at this? Cheers, Michiel --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]