Uploaded image for project: 'Application Server 3 4 5 and 6'
  1. Application Server 3 4 5 and 6
  2. JBAS-3043

Conflicts in isUserInRole(String) between web apps with different user to role mappings for same user name

    XMLWordPrintable

Details

    Description

      two web apps in the same JBoss instance. Using different JAAS domains set up in jboss-web.xml

      login to first web app with user 'sa', correctly give roles R and X from the JAAS module
      login to second web app with user 'sa', correctly gives roles R and Y from separate JAAS module

      refresh listing page on first web app, user 'sa' now has roles from user 'sa' in web app2

      this does happen in 4.0.3 SP1
      this does NOT happen in 3.2.7

      Attachments

        Issue Links

          relates to

          Bug - A problem that impairs or prevents the functions of the product. JBAS-3077 Security propagation to EJB tier fails if SSO valve's requireReauthentication flag is false.

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              starksm64 Scott Stark (Inactive)
              rob_canoe1 Rob Pumphrey (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: