[
https://issues.apache.org/jira/browse/JS2-589?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13031780#comment-13031780
]
Ate Douma commented on JS2-589:
-------------------------------
I'll implement the ThreadLocal cleanup on ServletRequest using the new
ServletRequestCleanupService from JS2-1253
> PermissionManagerImpl use of ThreadLocal for caching causes inconsistent
> results
> --------------------------------------------------------------------------------
>
> Key: JS2-589
> URL: https://issues.apache.org/jira/browse/JS2-589
> Project: Jetspeed 2
> Issue Type: Bug
> Components: Security
> Affects Versions: 2.1-dev
> Environment: java 1.5, oracle, any OS
> Reporter: Ethan Adams
> Assignee: Ate Douma
> Priority: Critical
> Fix For: 2.2.2
>
>
> PermissionManagerImpl uses ThreadLocal for permission caching. This means
> that once the permissions are loaded for one thread (ex. thread 1), they are
> there until someone changes the permissions using the PermissionManager (on
> that thread). If permissions are edited on another thread (thread 2), thread
> 1 never gets updated. So permissions are inconsistent until the portal is
> restarted.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
