Uploaded image for project: 'Seam Security'
  1. Seam Security
  2. SEAMSECURITY-21

IdentityImpl does not clear active roles/groups in unAuthenticate

        Details

        • Type: Bug
        • Status: Resolved (View Workflow)
        • Priority: Major
        • Resolution: Done
        • Affects Version/s: 3.0.0.Alpha2
        • Fix Version/s: 3.0.0.Beta2
        • Labels:
          None
        • Environment:
          JBoss 6.0.0 final

          Description

          When a user logs in again with another user name after a logout, he gets the active roles and active groups from the previous user name because activeRoles and activeGroups are not cleared.

            Gliffy Diagrams

              Activity

              Hide
              Permalink
              shane.bryzak Shane Bryzak added a comment -

              unAuthenticate() now clears active and pre-auth roles and groups.

              Show
              shane.bryzak Shane Bryzak added a comment - unAuthenticate() now clears active and pre-auth roles and groups.

                People

                • Assignee:
                  shane.bryzak Shane Bryzak
                  Reporter:
                  william.drai William Drai
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  0 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Development