Re: atomicity problem in SecurityUtil.java

2012-07-22 Thread Mark Thomas
Chris R wrote: >Mark, > >Thank you for your "kind" response. > >>> and it seems that there may be a problem there. More specifically, in the >>> execute method, getAttribute of Globals.SUBJECT_ATTR is obtained on a >>> session and then it is set in a non-atomic fashion. >> >> While that stateme

Re: atomicity problem in SecurityUtil.java

2012-07-21 Thread Chris R
Mark, Thank you for your "kind" response. > and it seems that there may be a problem there. More specifically, in the > > execute method, getAttribute of Globals.SUBJECT_ATTR is obtained on a > > session > > and then it is set in a non-atomic fashion. > > While that statement is true, you have no

Re: atomicity problem in SecurityUtil.java

2012-07-21 Thread Mark Thomas
On 21/07/2012 21:32, Chris R wrote: > Hi, > > I am looking at SecurityUtil.java ( > http://www.docjar.com/html/api/org/apache/catalina/security/SecurityUtil.java.html) It would be much better to reference the source from the canonical location (the ASF svn repo) rather than some unverified third-