GeronimoPolicy tries to use guaranteed open PolicyConfigurations as if they are 
in service
------------------------------------------------------------------------------------------

         Key: GERONIMO-516
         URL: http://nagoya.apache.org/jira/browse/GERONIMO-516
     Project: Apache Geronimo
        Type: Bug
  Components: security  
    Versions: 1.0-M3    
    Reporter: David Jencks


JACC spec 3.1.1.1 assures us that 
                GeronimoPolicyConfiguration configuration = 
(GeronimoPolicyConfiguration)factory.getPolicyConfiguration(contextID, false);

will always return a PolicyConfiguration that is in the open state.

The next line is:

                if (configuration.inService()) {
                    if (configuration.implies(domain, permission)) return true;


This bug was hidden by the previous behavior of not opening configurations when 
getPolicyConfiguration was called.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://nagoya.apache.org/jira/secure/Administrators.jspa
-
If you want more information on JIRA, or have a bug to report see:
   http://www.atlassian.com/software/jira

Reply via email to