7 Replies Latest reply on Jul 31, 2013 12:47 AM by ejb3workshop

    Regression of role-based authorization

    sebek64
    sebek64 Nov 6, 2012 11:08 AM

      A recent commit (namely c827081c3a63a42590eb12dd03f8e96d593648b3 in 7.1 branch) breaks role-based authorization for me. I have a few JSF pages with weld beans and EJB backing beans. Some EJBs are annotated by @RolesAllowed. To make it working, the previous versions required jboss-ejb3.xml in WEB-INF with the following content:

       

      <jboss:ejb-jar xmlns:s="urn:security" version="3.1" impl-version="2.0" ...>

          <assembly-descriptor>

              <s:security>

                  <ejb-name>*</ejb-name>

                  <s:security-domain>simphony</s:security-domain>

              </s:security>

          </assembly-descriptor>

      </jboss:ejb-jar>

       

      I have two security domains (my custom domain and "other" which is unused). The custom domain has two login modules in authentication section (Database and DatabaseCertificate). Otherwise, there is no configuration like authorization or mapping. With the mentioned commit applied, I get the following error:

       

      Error Rendering View[/index.xhtml]: javax.ejb.EJBAccessException: JBAS014502: Invocation on method: public java.util.List test.CommonModelProducer.getActive() of bean: CommonModelProducer is not allowed

      ...

       

      However, the method is annotated with @RolesAllowed containing a role that I have (gained using Database login module). It is a bug in the commit, or do I need an additional configuration?

      • 4765 Views
      • Tags:
        • 1. Re: Regression of role-based authorization
          jaikiran
          jaikiran Nov 6, 2012 11:45 AM (in response to sebek64)

          Just for the sake of completion, can you please add the security domain configuration and the EJB class' relevant code?

            • Actions
          • 2. Re: Regression of role-based authorization
            sguilhen
            sguilhen Nov 6, 2012 11:59 AM (in response to jaikiran)

            Adding to Jaikiran's request, can you enable TRACE log level for org.jboss.security as well?

              • Actions
            • 3. Re: Regression of role-based authorization
              sebek64
              sebek64 Nov 6, 2012 12:51 PM (in response to sguilhen)

              EJB may look like this:

               

              @Stateful

              @RolesAllowed("user")

              public class RoleCrud {

                   public List<...> getRoleList() { ... }

              }

               

              Here is security domain config (but nothing special should be there):

               

                          <security-domain name="simphony" cache-type="default">
                              <authentication>
                                  <login-module code="DatabaseCertificate" flag="sufficient">
                                      <module-option name="password-stacking" value="useFirstPass"/>
                                      <module-option name="verifier" value="org.jboss.security.auth.certs.AnyCertVerifier"/>
                                      <module-option name="dsJndiName" value="java:/jdbc/simphony"/>
                                      <module-option name="rolesQuery" value="select 'nfc', 'Roles' from ClientCertificate where subject = ? and expireStamp > current_timestamp and not revoked"/>
                                  </login-module>
                                  <login-module code="Database" flag="required">
                                      <module-option name="password-stacking" value="useFirstPass"/>
                                      <module-option name="dsJndiName" value="java:/jdbc/simphony"/>
                                      <module-option name="principalsQuery" value="select passwordSHA256 from Person where removed = false and email = ?"/>
                                      <module-option name="rolesQuery" value="select 'user', 'Roles' where ? is not null"/>
                                      <module-option name="hashAlgorithm" value="SHA-256"/>
                                      <module-option name="hashEncoding" value="hex"/>
                                      <module-option name="ignorePasswordCase" value="true"/>
                                  </login-module>
                              </authentication>
                          </security-domain>

               

              And here is the full exception:

               

              18:44:14,757 DEBUG [org.jboss.security] (http-/192.168.20.172:8443-5) PBOX000293: Exception caught: javax.naming.NameNotFoundException: policyRegistration -- service jboss.naming.context.java.policyRegistration

                  at org.jboss.as.naming.ServiceBasedNamingStore.lookup(ServiceBasedNamingStore.java:103)

                  at org.jboss.as.naming.NamingContext.lookup(NamingContext.java:193)

                  at org.jboss.as.naming.InitialContext.lookup(InitialContext.java:120)

                  at org.jboss.as.naming.NamingContext.lookup(NamingContext.java:182)

                  at org.jboss.as.naming.NamingContext.lookup(NamingContext.java:178)

                  at javax.naming.InitialContext.lookup(InitialContext.java:411) [rt.jar:1.7.0_09]

                  at org.jboss.security.plugins.javaee.EJBAuthorizationHelper.getPolicyRegistrationFromJNDI(EJBAuthorizationHelper.java:353) [picketbox-4.0.14.Final.jar:4.0.14.Final]

                  at org.jboss.security.plugins.javaee.EJBAuthorizationHelper.authorize(EJBAuthorizationHelper.java:303) [picketbox-4.0.14.Final.jar:4.0.14.Final]

                  at org.jboss.as.security.service.SimpleSecurityManager.authorize(SimpleSecurityManager.java:252) [jboss-as-security-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.as.ejb3.security.AuthorizationInterceptor.processInvocation(AuthorizationInterceptor.java:112) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.security.SecurityContextInterceptor.processInvocation(SecurityContextInterceptor.java:76) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.interceptors.ShutDownInterceptorFactory$1.processInvocation(ShutDownInterceptorFactory.java:42) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:59) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.interceptors.AdditionalSetupInterceptor.processInvocation(AdditionalSetupInterceptor.java:32) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.TCCLInterceptor.processInvocation(TCCLInterceptor.java:45) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:165) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.as.ee.component.ViewDescription$1.processInvocation(ViewDescription.java:182) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.stateful.StatefulComponentIdInterceptor.processInvocation(StatefulComponentIdInterceptor.java:52) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.ProxyInvocationHandler.invoke(ProxyInvocationHandler.java:72) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at cz.ttc.simphony.web.RoleCrud$$$view157.getRoleList(Unknown Source) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_09]

                  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_09]

                  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_09]

                  at java.lang.reflect.Method.invoke(Method.java:601) [rt.jar:1.7.0_09]

                  at org.jboss.weld.util.reflection.SecureReflections$13.work(SecureReflections.java:267) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.util.reflection.SecureReflectionAccess.run(SecureReflectionAccess.java:52) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.util.reflection.SecureReflectionAccess.runAsInvocation(SecureReflectionAccess.java:137) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.util.reflection.SecureReflections.invoke(SecureReflections.java:263) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.bean.proxy.EnterpriseBeanProxyMethodHandler.invoke(EnterpriseBeanProxyMethodHandler.java:111) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.bean.proxy.EnterpriseTargetBeanInstance.invoke(EnterpriseTargetBeanInstance.java:56) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.bean.proxy.ProxyMethodHandler.invoke(ProxyMethodHandler.java:105) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at cz.ttc.simphony.web.RoleCrud$Proxy$_$$_Weld$Proxy$.getRoleList(RoleCrud$Proxy$_$$_Weld$Proxy$.java) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at cz.ttc.simphony.web.RoleCrud$Proxy$_$$_WeldClientProxy.getRoleList(RoleCrud$Proxy$_$$_WeldClientProxy.java) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_09]

                  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_09]

                  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_09]

                  at java.lang.reflect.Method.invoke(Method.java:601) [rt.jar:1.7.0_09]

                  at javax.el.BeanELResolver.getValue(BeanELResolver.java:302) [jboss-el-api_2.2_spec-1.0.2.Final.jar:1.0.2.Final]

                  at com.sun.faces.el.DemuxCompositeELResolver._getValue(DemuxCompositeELResolver.java:176) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.el.DemuxCompositeELResolver.getValue(DemuxCompositeELResolver.java:203) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at org.apache.el.parser.AstValue.getValue(AstValue.java:169) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.el.parser.AstEmpty.getValue(AstEmpty.java:47) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.el.parser.AstNot.getValue(AstNot.java:44) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.el.ValueExpressionImpl.getValue(ValueExpressionImpl.java:189) [jbossweb-7.0.17.Final.jar:]

                  at org.jboss.weld.el.WeldValueExpression.getValue(WeldValueExpression.java:50) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at com.sun.faces.facelets.el.TagValueExpression.getValue(TagValueExpression.java:109) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at javax.faces.component.ComponentStateHelper.eval(ComponentStateHelper.java:194) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponentBase.isRendered(UIComponentBase.java:413) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1773) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at org.richfaces.renderkit.RendererBase.renderChildren(RendererBase.java:276) [richfaces-components-ui-4.2.3.Final.jar:4.2.3.Final]

                  at org.richfaces.renderkit.html.PanelRenderer.encodeEnd(PanelRenderer.java:181) [richfaces-components-ui-4.2.3.Final.jar:4.2.3.Final]

                  at javax.faces.component.UIComponentBase.encodeEnd(UIComponentBase.java:875) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1786) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.render.Renderer.encodeChildren(Renderer.java:168) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponentBase.encodeChildren(UIComponentBase.java:845) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1779) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1782) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1782) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at com.sun.faces.application.view.FaceletViewHandlingStrategy.renderView(FaceletViewHandlingStrategy.java:424) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.application.view.MultiViewHandler.renderView(MultiViewHandler.java:124) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at javax.faces.application.ViewHandlerWrapper.renderView(ViewHandlerWrapper.java:288) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.application.ViewHandlerWrapper.renderView(ViewHandlerWrapper.java:288) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at com.sun.faces.lifecycle.RenderResponsePhase.execute(RenderResponsePhase.java:121) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.lifecycle.Phase.doPhase(Phase.java:101) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:139) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at javax.faces.webapp.FacesServlet.service(FacesServlet.java:594) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) [jbossweb-7.0.17.Final.jar:]

                  at org.jboss.weld.servlet.ConversationPropagationFilter.doFilter(ConversationPropagationFilter.java:62) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) [jbossweb-7.0.17.Final.jar:]

                  at cz.ttc.simphony.web.STSFilter.doFilter(STSFilter.java:31) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:489) [jbossweb-7.0.17.Final.jar:]

                  at org.jboss.as.jpa.interceptor.WebNonTxEmCloserValve.invoke(WebNonTxEmCloserValve.java:50) [jboss-as-jpa-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169) [jboss-as-web-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:567) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:372) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:897) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:634) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:2039) [jbossweb-7.0.17.Final.jar:]

                  at java.lang.Thread.run(Thread.java:722) [rt.jar:1.7.0_09]

               

              18:44:14,768 DEBUG [org.jboss.security] (http-/192.168.20.172:8443-5) PBOX000325: Authorization processing error: java.lang.NullPointerException

                  at org.jboss.security.plugins.authorization.JBossAuthorizationContext.getAuthorizationInfo(JBossAuthorizationContext.java:375) [picketbox-4.0.14.Final.jar:4.0.14.Final]

                  at org.jboss.security.plugins.authorization.JBossAuthorizationContext.getAuthorizationInfo(JBossAuthorizationContext.java:365) [picketbox-4.0.14.Final.jar:4.0.14.Final]

                  at org.jboss.security.plugins.authorization.JBossAuthorizationContext.initializeModules(JBossAuthorizationContext.java:183) [picketbox-4.0.14.Final.jar:4.0.14.Final]

                  at org.jboss.security.plugins.authorization.JBossAuthorizationContext.authorize(JBossAuthorizationContext.java:145) [picketbox-4.0.14.Final.jar:4.0.14.Final]

                  at org.jboss.security.plugins.JBossAuthorizationManager.internalAuthorization(JBossAuthorizationManager.java:429) [picketbox-4.0.14.Final.jar:4.0.14.Final]

                  at org.jboss.security.plugins.JBossAuthorizationManager.authorize(JBossAuthorizationManager.java:115) [picketbox-4.0.14.Final.jar:4.0.14.Final]

                  at org.jboss.security.plugins.javaee.EJBAuthorizationHelper.authorize(EJBAuthorizationHelper.java:318) [picketbox-4.0.14.Final.jar:4.0.14.Final]

                  at org.jboss.as.security.service.SimpleSecurityManager.authorize(SimpleSecurityManager.java:252) [jboss-as-security-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.as.ejb3.security.AuthorizationInterceptor.processInvocation(AuthorizationInterceptor.java:112) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.security.SecurityContextInterceptor.processInvocation(SecurityContextInterceptor.java:76) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.interceptors.ShutDownInterceptorFactory$1.processInvocation(ShutDownInterceptorFactory.java:42) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:59) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.interceptors.AdditionalSetupInterceptor.processInvocation(AdditionalSetupInterceptor.java:32) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.TCCLInterceptor.processInvocation(TCCLInterceptor.java:45) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:165) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.as.ee.component.ViewDescription$1.processInvocation(ViewDescription.java:182) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.stateful.StatefulComponentIdInterceptor.processInvocation(StatefulComponentIdInterceptor.java:52) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.ProxyInvocationHandler.invoke(ProxyInvocationHandler.java:72) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at cz.ttc.simphony.web.RoleCrud$$$view157.getRoleList(Unknown Source) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_09]

                  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_09]

                  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_09]

                  at java.lang.reflect.Method.invoke(Method.java:601) [rt.jar:1.7.0_09]

                  at org.jboss.weld.util.reflection.SecureReflections$13.work(SecureReflections.java:267) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.util.reflection.SecureReflectionAccess.run(SecureReflectionAccess.java:52) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.util.reflection.SecureReflectionAccess.runAsInvocation(SecureReflectionAccess.java:137) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.util.reflection.SecureReflections.invoke(SecureReflections.java:263) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.bean.proxy.EnterpriseBeanProxyMethodHandler.invoke(EnterpriseBeanProxyMethodHandler.java:111) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.bean.proxy.EnterpriseTargetBeanInstance.invoke(EnterpriseTargetBeanInstance.java:56) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.bean.proxy.ProxyMethodHandler.invoke(ProxyMethodHandler.java:105) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at cz.ttc.simphony.web.RoleCrud$Proxy$_$$_Weld$Proxy$.getRoleList(RoleCrud$Proxy$_$$_Weld$Proxy$.java) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at cz.ttc.simphony.web.RoleCrud$Proxy$_$$_WeldClientProxy.getRoleList(RoleCrud$Proxy$_$$_WeldClientProxy.java) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_09]

                  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_09]

                  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_09]

                  at java.lang.reflect.Method.invoke(Method.java:601) [rt.jar:1.7.0_09]

                  at javax.el.BeanELResolver.getValue(BeanELResolver.java:302) [jboss-el-api_2.2_spec-1.0.2.Final.jar:1.0.2.Final]

                  at com.sun.faces.el.DemuxCompositeELResolver._getValue(DemuxCompositeELResolver.java:176) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.el.DemuxCompositeELResolver.getValue(DemuxCompositeELResolver.java:203) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at org.apache.el.parser.AstValue.getValue(AstValue.java:169) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.el.parser.AstEmpty.getValue(AstEmpty.java:47) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.el.parser.AstNot.getValue(AstNot.java:44) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.el.ValueExpressionImpl.getValue(ValueExpressionImpl.java:189) [jbossweb-7.0.17.Final.jar:]

                  at org.jboss.weld.el.WeldValueExpression.getValue(WeldValueExpression.java:50) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at com.sun.faces.facelets.el.TagValueExpression.getValue(TagValueExpression.java:109) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at javax.faces.component.ComponentStateHelper.eval(ComponentStateHelper.java:194) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponentBase.isRendered(UIComponentBase.java:413) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1773) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at org.richfaces.renderkit.RendererBase.renderChildren(RendererBase.java:276) [richfaces-components-ui-4.2.3.Final.jar:4.2.3.Final]

                  at org.richfaces.renderkit.html.PanelRenderer.encodeEnd(PanelRenderer.java:181) [richfaces-components-ui-4.2.3.Final.jar:4.2.3.Final]

                  at javax.faces.component.UIComponentBase.encodeEnd(UIComponentBase.java:875) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1786) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.render.Renderer.encodeChildren(Renderer.java:168) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponentBase.encodeChildren(UIComponentBase.java:845) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1779) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1782) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1782) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at com.sun.faces.application.view.FaceletViewHandlingStrategy.renderView(FaceletViewHandlingStrategy.java:424) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.application.view.MultiViewHandler.renderView(MultiViewHandler.java:124) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at javax.faces.application.ViewHandlerWrapper.renderView(ViewHandlerWrapper.java:288) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.application.ViewHandlerWrapper.renderView(ViewHandlerWrapper.java:288) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at com.sun.faces.lifecycle.RenderResponsePhase.execute(RenderResponsePhase.java:121) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.lifecycle.Phase.doPhase(Phase.java:101) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:139) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at javax.faces.webapp.FacesServlet.service(FacesServlet.java:594) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) [jbossweb-7.0.17.Final.jar:]

                  at org.jboss.weld.servlet.ConversationPropagationFilter.doFilter(ConversationPropagationFilter.java:62) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) [jbossweb-7.0.17.Final.jar:]

                  at cz.ttc.simphony.web.STSFilter.doFilter(STSFilter.java:31) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:489) [jbossweb-7.0.17.Final.jar:]

                  at org.jboss.as.jpa.interceptor.WebNonTxEmCloserValve.invoke(WebNonTxEmCloserValve.java:50) [jboss-as-jpa-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169) [jboss-as-web-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:567) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:372) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:897) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:634) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:2039) [jbossweb-7.0.17.Final.jar:]

                  at java.lang.Thread.run(Thread.java:722) [rt.jar:1.7.0_09]

               

              18:44:14,776 TRACE [org.jboss.security.audit] (http-/192.168.20.172:8443-5) [Error]Source=org.jboss.security.plugins.javaee.EJBAuthorizationHelper;Exception:=null;Resource:=[org.jboss.security.authorization.resources.EJBResource:contextMap={policyRegistration=null}:method=public java.util.List cz.ttc.simphony.web.RoleCrud.getRoleList():ejbMethodInterface=Local:ejbName=RoleCrud:ejbPrincipal=vomacka@example.com:MethodRoles=Roles(user,):securityRoleReferences=null:callerSubject=Subject:

                  Principal: vomacka@example.com

                  Principal: Roles(members:user)

                  Principal: CallerPrincipal(members:vomacka@example.com)

              :callerRunAs=null:callerRunAs=null:ejbRestrictionEnforcement=false:ejbVersion=2.0];policyRegistration=null;

              18:44:14,776 TRACE [org.jboss.security] (http-/192.168.20.172:8443-5) PBOX000354: Setting security roles ThreadLocal: null

              18:44:14,776 ERROR [org.jboss.as.ejb3.invocation] (http-/192.168.20.172:8443-5) JBAS014134: EJB Invocation failed on component RoleCrud for method public java.util.List cz.ttc.simphony.web.RoleCrud.getRoleList(): javax.ejb.EJBAccessException: JBAS014502: Invocation on method: public java.util.List cz.ttc.simphony.web.RoleCrud.getRoleList() of bean: RoleCrud is not allowed

                  at org.jboss.as.ejb3.security.AuthorizationInterceptor.processInvocation(AuthorizationInterceptor.java:114) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.security.SecurityContextInterceptor.processInvocation(SecurityContextInterceptor.java:76) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.interceptors.ShutDownInterceptorFactory$1.processInvocation(ShutDownInterceptorFactory.java:42) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:59) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.interceptors.AdditionalSetupInterceptor.processInvocation(AdditionalSetupInterceptor.java:32) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.TCCLInterceptor.processInvocation(TCCLInterceptor.java:45) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:165) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.as.ee.component.ViewDescription$1.processInvocation(ViewDescription.java:182) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.stateful.StatefulComponentIdInterceptor.processInvocation(StatefulComponentIdInterceptor.java:52) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.ProxyInvocationHandler.invoke(ProxyInvocationHandler.java:72) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at cz.ttc.simphony.web.RoleCrud$$$view157.getRoleList(Unknown Source) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_09]

                  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_09]

                  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_09]

                  at java.lang.reflect.Method.invoke(Method.java:601) [rt.jar:1.7.0_09]

                  at org.jboss.weld.util.reflection.SecureReflections$13.work(SecureReflections.java:267) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.util.reflection.SecureReflectionAccess.run(SecureReflectionAccess.java:52) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.util.reflection.SecureReflectionAccess.runAsInvocation(SecureReflectionAccess.java:137) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.util.reflection.SecureReflections.invoke(SecureReflections.java:263) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.bean.proxy.EnterpriseBeanProxyMethodHandler.invoke(EnterpriseBeanProxyMethodHandler.java:111) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.bean.proxy.EnterpriseTargetBeanInstance.invoke(EnterpriseTargetBeanInstance.java:56) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.bean.proxy.ProxyMethodHandler.invoke(ProxyMethodHandler.java:105) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at cz.ttc.simphony.web.RoleCrud$Proxy$_$$_Weld$Proxy$.getRoleList(RoleCrud$Proxy$_$$_Weld$Proxy$.java) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at cz.ttc.simphony.web.RoleCrud$Proxy$_$$_WeldClientProxy.getRoleList(RoleCrud$Proxy$_$$_WeldClientProxy.java) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_09]

                  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_09]

                  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_09]

                  at java.lang.reflect.Method.invoke(Method.java:601) [rt.jar:1.7.0_09]

                  at javax.el.BeanELResolver.getValue(BeanELResolver.java:302) [jboss-el-api_2.2_spec-1.0.2.Final.jar:1.0.2.Final]

                  at com.sun.faces.el.DemuxCompositeELResolver._getValue(DemuxCompositeELResolver.java:176) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.el.DemuxCompositeELResolver.getValue(DemuxCompositeELResolver.java:203) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at org.apache.el.parser.AstValue.getValue(AstValue.java:169) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.el.parser.AstEmpty.getValue(AstEmpty.java:47) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.el.parser.AstNot.getValue(AstNot.java:44) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.el.ValueExpressionImpl.getValue(ValueExpressionImpl.java:189) [jbossweb-7.0.17.Final.jar:]

                  at org.jboss.weld.el.WeldValueExpression.getValue(WeldValueExpression.java:50) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at com.sun.faces.facelets.el.TagValueExpression.getValue(TagValueExpression.java:109) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at javax.faces.component.ComponentStateHelper.eval(ComponentStateHelper.java:194) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponentBase.isRendered(UIComponentBase.java:413) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1773) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at org.richfaces.renderkit.RendererBase.renderChildren(RendererBase.java:276) [richfaces-components-ui-4.2.3.Final.jar:4.2.3.Final]

                  at org.richfaces.renderkit.html.PanelRenderer.encodeEnd(PanelRenderer.java:181) [richfaces-components-ui-4.2.3.Final.jar:4.2.3.Final]

                  at javax.faces.component.UIComponentBase.encodeEnd(UIComponentBase.java:875) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1786) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.render.Renderer.encodeChildren(Renderer.java:168) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponentBase.encodeChildren(UIComponentBase.java:845) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1779) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1782) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1782) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at com.sun.faces.application.view.FaceletViewHandlingStrategy.renderView(FaceletViewHandlingStrategy.java:424) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.application.view.MultiViewHandler.renderView(MultiViewHandler.java:124) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at javax.faces.application.ViewHandlerWrapper.renderView(ViewHandlerWrapper.java:288) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.application.ViewHandlerWrapper.renderView(ViewHandlerWrapper.java:288) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at com.sun.faces.lifecycle.RenderResponsePhase.execute(RenderResponsePhase.java:121) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.lifecycle.Phase.doPhase(Phase.java:101) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:139) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at javax.faces.webapp.FacesServlet.service(FacesServlet.java:594) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) [jbossweb-7.0.17.Final.jar:]

                  at org.jboss.weld.servlet.ConversationPropagationFilter.doFilter(ConversationPropagationFilter.java:62) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) [jbossweb-7.0.17.Final.jar:]

                  at cz.ttc.simphony.web.STSFilter.doFilter(STSFilter.java:31) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:489) [jbossweb-7.0.17.Final.jar:]

                  at org.jboss.as.jpa.interceptor.WebNonTxEmCloserValve.invoke(WebNonTxEmCloserValve.java:50) [jboss-as-jpa-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169) [jboss-as-web-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:567) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:372) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:897) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:634) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:2039) [jbossweb-7.0.17.Final.jar:]

                  at java.lang.Thread.run(Thread.java:722) [rt.jar:1.7.0_09]

               

              18:44:14,784 SEVERE [javax.enterprise.resource.webcontainer.jsf.application] (http-/192.168.20.172:8443-5) Error Rendering View[/role-list.xhtml]: javax.el.ELException: /role-list.xhtml @17,119 rendered="#{not empty roleCrud.roleList}": javax.ejb.EJBAccessException: JBAS014502: Invocation on method: public java.util.List cz.ttc.simphony.web.RoleCrud.getRoleList() of bean: RoleCrud is not allowed

                  at com.sun.faces.facelets.el.TagValueExpression.getValue(TagValueExpression.java:114) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at javax.faces.component.ComponentStateHelper.eval(ComponentStateHelper.java:194) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponentBase.isRendered(UIComponentBase.java:413) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1773) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at org.richfaces.renderkit.RendererBase.renderChildren(RendererBase.java:276) [richfaces-components-ui-4.2.3.Final.jar:4.2.3.Final]

                  at org.richfaces.renderkit.html.PanelRenderer.encodeEnd(PanelRenderer.java:181) [richfaces-components-ui-4.2.3.Final.jar:4.2.3.Final]

                  at javax.faces.component.UIComponentBase.encodeEnd(UIComponentBase.java:875) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1786) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.render.Renderer.encodeChildren(Renderer.java:168) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponentBase.encodeChildren(UIComponentBase.java:845) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1779) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1782) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.component.UIComponent.encodeAll(UIComponent.java:1782) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at com.sun.faces.application.view.FaceletViewHandlingStrategy.renderView(FaceletViewHandlingStrategy.java:424) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.application.view.MultiViewHandler.renderView(MultiViewHandler.java:124) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at javax.faces.application.ViewHandlerWrapper.renderView(ViewHandlerWrapper.java:288) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at javax.faces.application.ViewHandlerWrapper.renderView(ViewHandlerWrapper.java:288) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at com.sun.faces.lifecycle.RenderResponsePhase.execute(RenderResponsePhase.java:121) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.lifecycle.Phase.doPhase(Phase.java:101) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:139) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at javax.faces.webapp.FacesServlet.service(FacesServlet.java:594) [jboss-jsf-api_2.1_spec-2.0.7.Final.jar:2.0.7.Final]

                  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) [jbossweb-7.0.17.Final.jar:]

                  at org.jboss.weld.servlet.ConversationPropagationFilter.doFilter(ConversationPropagationFilter.java:62) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) [jbossweb-7.0.17.Final.jar:]

                  at cz.ttc.simphony.web.STSFilter.doFilter(STSFilter.java:31) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:489) [jbossweb-7.0.17.Final.jar:]

                  at org.jboss.as.jpa.interceptor.WebNonTxEmCloserValve.invoke(WebNonTxEmCloserValve.java:50) [jboss-as-jpa-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169) [jboss-as-web-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:567) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:372) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:897) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:634) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:2039) [jbossweb-7.0.17.Final.jar:]

                  at java.lang.Thread.run(Thread.java:722) [rt.jar:1.7.0_09]

              Caused by: javax.ejb.EJBAccessException: JBAS014502: Invocation on method: public java.util.List cz.ttc.simphony.web.RoleCrud.getRoleList() of bean: RoleCrud is not allowed

                  at org.jboss.as.ejb3.security.AuthorizationInterceptor.processInvocation(AuthorizationInterceptor.java:114) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.security.SecurityContextInterceptor.processInvocation(SecurityContextInterceptor.java:76) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.interceptors.ShutDownInterceptorFactory$1.processInvocation(ShutDownInterceptorFactory.java:42) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:59) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.interceptors.AdditionalSetupInterceptor.processInvocation(AdditionalSetupInterceptor.java:32) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.TCCLInterceptor.processInvocation(TCCLInterceptor.java:45) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:165) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.as.ee.component.ViewDescription$1.processInvocation(ViewDescription.java:182) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ejb3.component.stateful.StatefulComponentIdInterceptor.processInvocation(StatefulComponentIdInterceptor.java:52) [jboss-as-ejb3-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]

                  at org.jboss.as.ee.component.ProxyInvocationHandler.invoke(ProxyInvocationHandler.java:72) [jboss-as-ee-7.1.4.Final-SNAPSHOT.jar:7.1.4.Final-SNAPSHOT]

                  at cz.ttc.simphony.web.RoleCrud$$$view157.getRoleList(Unknown Source) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_09]

                  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_09]

                  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_09]

                  at java.lang.reflect.Method.invoke(Method.java:601) [rt.jar:1.7.0_09]

                  at org.jboss.weld.util.reflection.SecureReflections$13.work(SecureReflections.java:267) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.util.reflection.SecureReflectionAccess.run(SecureReflectionAccess.java:52) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.util.reflection.SecureReflectionAccess.runAsInvocation(SecureReflectionAccess.java:137) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.util.reflection.SecureReflections.invoke(SecureReflections.java:263) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.bean.proxy.EnterpriseBeanProxyMethodHandler.invoke(EnterpriseBeanProxyMethodHandler.java:111) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.bean.proxy.EnterpriseTargetBeanInstance.invoke(EnterpriseTargetBeanInstance.java:56) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at org.jboss.weld.bean.proxy.ProxyMethodHandler.invoke(ProxyMethodHandler.java:105) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at cz.ttc.simphony.web.RoleCrud$Proxy$_$$_Weld$Proxy$.getRoleList(RoleCrud$Proxy$_$$_Weld$Proxy$.java) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at cz.ttc.simphony.web.RoleCrud$Proxy$_$$_WeldClientProxy.getRoleList(RoleCrud$Proxy$_$$_WeldClientProxy.java) [simphony-jar-2.1.0-SNAPSHOT.jar:]

                  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_09]

                  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_09]

                  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_09]

                  at java.lang.reflect.Method.invoke(Method.java:601) [rt.jar:1.7.0_09]

                  at javax.el.BeanELResolver.getValue(BeanELResolver.java:302) [jboss-el-api_2.2_spec-1.0.2.Final.jar:1.0.2.Final]

                  at com.sun.faces.el.DemuxCompositeELResolver._getValue(DemuxCompositeELResolver.java:176) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at com.sun.faces.el.DemuxCompositeELResolver.getValue(DemuxCompositeELResolver.java:203) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  at org.apache.el.parser.AstValue.getValue(AstValue.java:169) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.el.parser.AstEmpty.getValue(AstEmpty.java:47) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.el.parser.AstNot.getValue(AstNot.java:44) [jbossweb-7.0.17.Final.jar:]

                  at org.apache.el.ValueExpressionImpl.getValue(ValueExpressionImpl.java:189) [jbossweb-7.0.17.Final.jar:]

                  at org.jboss.weld.el.WeldValueExpression.getValue(WeldValueExpression.java:50) [weld-core-1.1.10.Final.jar:2012-10-12 10:00]

                  at com.sun.faces.facelets.el.TagValueExpression.getValue(TagValueExpression.java:109) [jsf-impl-2.1.13-jbossorg-1.jar:]

                  ... 42 more

                • Actions
              • 4. Re: Regression of role-based authorization
                sebek64
                sebek64 Nov 6, 2012 12:56 PM (in response to sebek64)

                Another observation is that even if I drop @RolesAllowed, authorization fails. It fails even when I add @PermitAll.

                  • Actions
                • 5. Re: Regression of role-based authorization
                  sebek64
                  sebek64 Nov 6, 2012 1:08 PM (in response to sebek64)

                  Ok, so I've found the culprit. Some time ago I dropped jboss-web-policy and jboss-ejb-policy from the configuration file. When I readded them, things started to work correctly.

                   

                  When I asked why the profiles are there, I got no positive reply:

                   

                  https://community.jboss.org/message/752117

                  https://issues.jboss.org/browse/AS7-5319

                   

                  If the profiles have a meaning, it should be documented somewhere. I also think that the above mentioned bug should be closed.

                    • Actions
                  • 6. Re: Regression of role-based authorization
                    sguilhen
                    sguilhen Nov 6, 2012 1:19 PM (in response to sebek64)

                    This definitely needs to be better documented. The jboss-ejb-policy and jboss-web-policy domains just define the default authorization modules that should be used if none is found in the app security domain but they are required.

                      • Actions
                    • 7. Re: Regression of role-based authorization
                      ejb3workshop
                      ejb3workshop Jul 31, 2013 12:47 AM (in response to sguilhen)

                      Any chance of seeing an example of these files ?

                        • Actions