metatech created CXF-5864:
-----------------------------
Summary: Anonymous users have no permissions since 2.6.3
Key: CXF-5864
URL: https://issues.apache.org/jira/browse/CXF-5864
Project: CXF
Issue Type: Bug
Affects Versions: 2.6.3
Reporter: metatech
Since CXF-4495 (contained in CXF 2.6.3), anonymous users do no have any
permissions anymore.
The method "handleMessage" of the class "AbstractAuthorizingInInterceptor" now
checks that the UserPrincipal is not null.
Any call results now into a AccessDeniedException.
[code]
Caused by: org.apache.cxf.interceptor.security.AccessDeniedException:
Unauthorized
at
org.apache.cxf.interceptor.security.AbstractAuthorizingInInterceptor.handleMessage(AbstractAuthorizingInInterceptor.java:57)
~[cxf-rt-core-2.6.3.jar:2.6.3]
[code]
--
This message was sent by Atlassian JIRA
(v6.2#6252)