Loading...

XML

Word

Printable

CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
Target Release:

7.1.0.GA
Git Pull Request:
https://github.com/jbossas/jboss-eap7/pull/2091
Steps to Reproduce:
Hide

mvn clean install -Dwildfly.tmp.enable.invocation.tests=true -DallTests -pl testsuite/integration/basic -Dtest=org.jboss.as.test.integration.ejb.security.RunAsPrincipalTestCase#testSingletonPostconstructSecurityNotPropagating
Show
mvn clean install -Dwildfly.tmp.enable.invocation.tests= true -DallTests -pl testsuite/integration/basic -Dtest=org.jboss.as.test.integration.ejb.security.RunAsPrincipalTestCase#testSingletonPostconstructSecurityNotPropagating

In testSingletonPostconstructSecurityNotPropagating, when Elytron enabled, identity (including Admin role) is propagated into StatelessBBean:

StatelessSingletonUseBean
SimpleSingletonBean
| check Admin in [Admin] (has required role)
StatelessBBean

In non-Elytron case the check is unsuccessful as test require, because identity is not propagated:

StatelessSingletonUseBean
SimpleSingletonBean
| authorize
EXCEPTION
 methodRoles = Admin
 securityContext.subjectInfo = anonymouse

This is lack of ~~WFLY-981~~ in Elytron:

blocks

JBEAP-11560 Fix tests which currently fail with -Dwildfly.tmp.enable.elytron.profile.tests

clones

WFLY-9039 EJB with Elytron propagate identity even when it should not