Sorry -- forgot the code...

Replace

  assert context != null : "No registered context";

with

  if (context == null) 
    throw new AccessControlException("No registered context (may have
expired)");


Scott Stanchfield wrote:
> 
> Suggested Fix
> 
> Change getCurrentContext() to throw and AccessControlException when
> context is null to prevent skipping of "after" processing in
> BeforeAfterValve. All callers of getCurrentContext() already catch
> AccessControlException and treat it as "not authorized".
> 

-- 
View this message in context: 
http://www.nabble.com/Asking-again%3A-No-registered-context-in-security-getCurrentContext%28%29-after-apps-run-for-two-days.-tf4193578s134.html#a13146591
Sent from the Apache Geronimo - Users mailing list archive at Nabble.com.

Reply via email to