Uploaded image for project: 'JBoss ESB'
  1. JBoss ESB
  2. JBESB-3165

war-security does not work for EBWS.

    Details

      Description

      In EsbWebServiceDeployer only gateways in jboss-esb.xml are considered and services configured with EBWS are not in the deploy method:
      webModel.setAuthDomain(esbMetaData.getModel().getAuthDomain());
      webModel.setAuthMethod(esbMetaData.getModel().getAuthMethod());

      ModelUtil.updateWebModel(ModelUtil.getListenerGroups(esbMetaData.getModel()), webModel);

      The getListenerGroups method only looks for gateways and an EBWS is not considered to be one. So there will be no security constraints for the url to the EBWS.
      This is just from a quick look into the code base here and I need to look into this more closely.

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                beve Daniel Bevenius
              • Votes:
                3 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated: