portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ate Douma (JIRA)" <jetspeed-...@portals.apache.org>
Subject [jira] [Commented] (JS2-589) PermissionManagerImpl use of ThreadLocal for caching causes inconsistent results
Date Wed, 11 May 2011 15:27:47 GMT

    [ https://issues.apache.org/jira/browse/JS2-589?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13031780#comment-13031780
] 

Ate Douma commented on JS2-589:
-------------------------------

I'll implement the ThreadLocal cleanup on ServletRequest using the new ServletRequestCleanupService
from JS2-1253

> PermissionManagerImpl use of ThreadLocal for caching causes inconsistent results
> --------------------------------------------------------------------------------
>
>                 Key: JS2-589
>                 URL: https://issues.apache.org/jira/browse/JS2-589
>             Project: Jetspeed 2
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 2.1-dev
>         Environment: java 1.5, oracle, any OS
>            Reporter: Ethan Adams
>            Assignee: Ate Douma
>            Priority: Critical
>             Fix For: 2.2.2
>
>
> PermissionManagerImpl uses ThreadLocal for permission caching.  This means that once
the permissions are loaded for one thread (ex. thread 1), they are there until someone changes
the permissions using the PermissionManager (on that thread).  If permissions are edited on
another thread (thread 2), thread 1 never gets updated.  So permissions are inconsistent until
the portal is restarted.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Mime
View raw message