2 Replies Latest reply on Jun 19, 2006 11:01 AM by Anil Saldanha

    Policy data member in JaccAuthorizationInterceptor.java

    chris griffith Expert

      Currently org.jboss.ejb.plugins.JaccAuthorizationInterceptor stores the Policy obtained by the call to Policy.getPolicy() during setContainer() method. Java API for the getPolicy() method says not to cache this value as it may change. So if the setContainer call is made on each invocation, there is no concern. However, if the setContainer call is only made when the container is created, there could be a problem.

      Does anyone know if the former or the latter is happing. Any pointers to where this happens would be nice to so I know for future reference.

      thanks, cgriffith