Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-11665

Security identity in contextual proxy not available in message driven bean

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Major
    • None
    • 15.0.1.Final
    • EJB, JMS
    • None

    Description

      1. Contextual proxies are not accessible from message driven beans due to a ClassNotFoundException for `org.jboss.as.ejb3.component.concurrent.EJBContextHandleFactory$EJBContextHandle`.

      2. Resolving the above leads to a further problem:

      Contextual proxies (see https://javaee.github.io/javaee-spec/javadocs/javax/enterprise/concurrent/ContextService.html) delivered via ObjectMessage to a message driven bean do not completely survive object serialisation.

      Specifically, the org.jboss.as.ee.concurrent.IdentityAwareProxyInvocationHandler that supports this has a transient instance variable:

         private final transient SecurityIdentity securityIdentity;
      

      which means that the proxied object does not have access to the caller's security identity as required by the EE Concurrency Utility specs.

      Attachments

        Issue Links

          Activity

            People

              jmesnil1@redhat.com Jeff Mesnil
              sfcoy Stephen Coy (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated: