Re: Security bug in authorization system?

2011-11-15 Thread Thorsten Panitz
Am 14.11.11 18:18, schrieb Torsten Mielke: Hello, I have debugged your unit test today and the reason for not getting an authorization exception in test accessToProtectedTopicWithWildcardsDestinationAsUserShouldFail() is that the AuthorizationBroker appends the security roles of all of the

Re: Security bug in authorization system?

2011-11-14 Thread Torsten Mielke
Hello, I have debugged your unit test today and the reason for not getting an authorization exception in test accessToProtectedTopicWithWildcardsDestinationAsUserShouldFail() is that the AuthorizationBroker appends the security roles of all of the sub nodes in its authorization