|
|
LPSA-77520
|
LPSA-65532
PACL - JDK 5 compliance
|
Raymond Augรฉ
|
James (Jim) Hinkey (Inactive)
|
|
Closed |
Won't Fix
|
|
|
|
|
|
6.1.1 CE GA2, 6.1.20 EE GA2 |
|
|
LPSA-77519
|
LPSA-65532
PACL - SQL security checks for indexes
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77518
|
LPSA-65532
PACL - don't wrap the bean if it's the portal asking for it
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77517
|
LPSA-65532
PACL - fix BeanLocatorTest to account for the bean being wrapped rather than not returned (so that i behaves like it did originally)
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77516
|
LPSA-65532
PACL - fix test-pacl-portlet (not including SQL)
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77515
|
LPSA-65532
PACL - prevent deep cascading permission checks on getClassLoader
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77514
|
LPSA-65532
PACL - make sure BeanLocator beans are properly wrapped (avoid wrapping in VelocityBeanHandler when not a velocity bean)
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77513
|
LPSA-65532
PACL - getPackage on a java proxy returns null
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77512
|
LPSA-65532
PACL - remaining tests
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77511
|
LPSA-65532
PACL - when we create PACLInitialContextFactoryBuilder we block the JVM from performing scheme based JNDI lookups
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77510
|
LPSA-65532
PACL - when calling the portal's BeanLocator the servletContextName is null
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77509
|
LPSA-65532
PACL - SQL tests
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77508
|
LPSA-65532
PACL - create a test suite for testing PACL
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77507
|
LPSA-65532
PACL - allow service builder plugins to unregister their MBeans
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77506
|
LPSA-65532
PACL - auto proxy finder and persistence when PACL is enabled
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77505
|
LPSA-65532
PACL - util-taglib should not be changing context classLoader
|
Brian Chan
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77504
|
LPSA-65532
PACL - pre-initialize classes
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.2.0 CE M5 |
|
|
LPSA-77503
|
LPSA-65532
PACL - inject pacl into ServiceBeanAopProxy
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77502
|
LPSA-65532
PACL - inject pacl into PortletApplicationContext
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77501
|
LPSA-65532
PACL - inject pacl into PortalSocketPermission
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77500
|
LPSA-65532
PACL - inject pacl into PortalServicePermission
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77499
|
LPSA-65532
PACL - inject pacl into PortalRuntimePermission
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77498
|
LPSA-65532
PACL - the PortalMessageBusPermission only checks send
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77497
|
LPSA-65532
PACL - inject pacl into PortalMessageBusPermission
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77496
|
LPSA-65532
PACL - inject pacl into PortalHookPermission
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77495
|
LPSA-65532
PACL - inject pacl into PortalFilePermission
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77494
|
LPSA-65532
PACL - inject pacl into TemplateContextHelper
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.2.0 CE M5 |
|
|
LPSA-77493
|
LPSA-65532
PACL - inject pacl into DirectRequestDispatcherFactoryImpl
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77492
|
LPSA-65532
PACL - inject pacl into HotDeployImpl
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77491
|
LPSA-65532
PACL - inject pacl into DataSourceFactoryImpl
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77490
|
LPSA-65532
PACL - add access controller to PACLRequestDispatcherWrapper
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77489
|
LPSA-65532
PACL - inject pacl into BeanLocatorImpl
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77488
|
LPSA-65532
PACL - wrap objects with DoPrivileged proxy where appropriate
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77487
|
LPSA-65532
PACL - fix identification of current JVM version
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77486
|
LPSA-65532
PACL - fallback onto a locally instantiated, locally applicable java.security.Policy
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77485
|
LPSA-65532
PACL - fix a small regression with the JSP compiler
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77484
|
LPSA-65532
PACL - separate context classloader swaping from the PACL logic in DirectRequestDispatcherFactoryImpl
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77483
|
LPSA-65532
PACL - implement trusted caller support for PortalRuntimeChecker
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77482
|
LPSA-65532
PACL - update the FileChecker with improved logic
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77481
|
LPSA-65532
PACL - improve the performance of DoPrivilegedHandler
|
Brian Chan
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77480
|
LPSA-65532
PACL - implement trusted caller support for NetChecker
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77479
|
LPSA-65532
PACL - implement trusted caller support for PortalServiceChecker
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77478
|
LPSA-65532
PACL - implement trusted caller support for ReflectChecker
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77477
|
LPSA-65532
PACL - implement trusted caller support for RuntimeChecker
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77476
|
LPSA-65532
PACL - implement trusted caller support for SecurityChecker
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77475
|
LPSA-65532
PACL - DLUtil - all context utils that delegate to the portal may fail permission check
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.2.0 CE M5 |
|
|
LPSA-77474
|
LPSA-65532
PACL - register trusted protection domains as early as possible
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77473
|
LPSA-65532
PACL - force "compilation" of the template within the context of the portal
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.2.0 CE M5 |
|
|
LPSA-77472
|
LPSA-65532
PACL - template API abstraction to allow invoking a template in the correct security context using the access controller pattern
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77471
|
LPSA-65532
PACL - template API abstraction to separate of context creation from initialization of utilities
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77470
|
LPSA-65532
PACL - method to dynamically wrap objects with a privileged handler
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77469
|
LPSA-65532
PACL - method for deep Liferay bean class detection
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77468
|
LPSA-65532
PACL - method to account for differences between JVM implementations
|
Brian Chan
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77467
|
LPSA-65532
PACL - method of detecting privileged callers
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77466
|
LPSA-65532
PACL - always execute macro library templates in context of the portal
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77465
|
LPSA-65532
PACL - ensure accessibility checks still work on public members
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77464
|
LPSA-65532
PACL - fast way to get the current PACLPolicy
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77463
|
LPSA-65532
PACL - remove remaining uses of PortalSecurityManagerThreadLocal in favour of access controllers
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77462
|
LPSA-65532
PACL - remove unused code from SecurityManagerUtil
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77461
|
LPSA-65532
PACL - centralize PortalHookPermission checking
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77460
|
LPSA-65532
PACL - implement cross-plugin security checks for BeanLocator
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77459
|
LPSA-65532
PACL - implement security checks for PortletBagPool
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77458
|
LPSA-65532
PACL - centralize the Service checks
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77457
|
LPSA-65532
PACL - centralize DynamicQuery check
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77456
|
LPSA-65532
PACL - centralize ThreadPoolExecutor checking
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77455
|
LPSA-65532
PACL - centralize PortalMessageBusPermission checking
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77454
|
LPSA-65532
PACL - prevent FileAvailabilityUtil from causing an unnecessary FilePermission check
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77453
|
LPSA-65532
PACL - add missing permission checks to FileUtil
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77452
|
LPSA-65532
PACL - add missing socket permission checks to HttpUtil
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77451
|
LPSA-65532
PACL - remove unused interface from InfrastructureUtil
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77450
|
LPSA-65532
PACL - centralize getClassLoader permission check, make sure it doesn't break any native JVM checks
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77449
|
LPSA-65532
PACL - add missing permission checks to ExpandoBridgeFactoryUtil
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77448
|
LPSA-65532
PACL - prevent a circularity error in CentralizedThreadLocal
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77447
|
LPSA-65532
PACL - unwrap HttpImpl if it's wrapped by DoPrivilegedBean
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.20 EE GA2, 6.1.30 EE GA3 |
|
|
LPSA-77446
|
LPSA-65532
PACL - remove hard coded classnames from RuntimeChecker
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.20 EE GA2, 6.1.30 EE GA3 |
|
|
LPSA-77445
|
LPSA-65532
PACL - add missing getter to LogFactoryUtil - needed for pacl security
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.20 EE GA2, 6.1.30 EE GA3 |
|
|
LPSA-77444
|
LPSA-65532
PACL - remove unused PACLPolicy.hasPortalService method
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.20 EE GA2, 6.1.30 EE GA3 |
|
|
LPSA-77443
|
LPSA-65532
PACL - add method to get the policy on PortalSecurityManager interface
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77442
|
LPSA-65532
PACL - remove uses of CheckerUtil.isAccessControllerDoPrivileged()
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77441
|
LPSA-65532
PACL - centralize and localize HookHotDeployListener security checks
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77440
|
LPSA-65532
PACL - eliminate most occurences of PortalSecurityManagerThreadLocal
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77439
|
LPSA-65532
PACL - rename inner PACLPortalLifecycle class
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77438
|
LPSA-65532
PACL - deprecate PACLClassUtil
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77437
|
LPSA-65532
PACL - deprecate PACLAdvice
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77436
|
LPSA-65532
PACL - deprecate PACLTemplateWrapper
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77435
|
LPSA-65532
PACL - deprecate BaseReflectChecker
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77434
|
LPSA-65532
PACL - deprecate CheckMemberAccessPermission
|
Brian Chan
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.20 EE GA2, 6.1.30 EE GA3 |
|
|
LPSA-77433
|
LPSA-65532
PACL - deprecate PACLBeanHandler
|
Brian Chan
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77432
|
LPSA-65532
PACL - Document environment variable security property
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77431
|
LPSA-65532
PACL - AWTPermission support (richfaces uses AWT for image processing)
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77430
|
LPSA-65532
PACL - Algorithm for handling permission checks on accessibility changes in local code
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77429
|
LPSA-65532
PACL - Move PACL specific classes into the pacl package
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77428
|
LPSA-65532
PACL - Private interface so that core code can unwrap privileged beans if needed
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77427
|
LPSA-65532
PACL - Apply interfaces everywhere a cast to the impl exists
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77426
|
LPSA-65532
PACL - private interfaces to support proxies
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77425
|
LPSA-65532
PACL - It's nessecary to initialize the portal security manager impl from the beginning in all cases
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77424
|
LPSA-65532
PACL - Implement a bean post processor which will process @DoPrivileged annotations
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77423
|
LPSA-65532
PACL - Convert to boolean implies API method to match j.s.Policy
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77422
|
LPSA-65532
PACL- Initialize the new java.security.Policy
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77421
|
LPSA-65532
PACL - Use new SecurityManagerUtil and initialize as early as possible
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77420
|
LPSA-65532
PACL - Centralize initialization of PACL into a private SecurityManagerUtil class
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77419
|
LPSA-65532
PACL - java.security.Policy based PACL implementation (a.k.a. PACLv2)
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M5 |
|
|
LPSA-77418
|
LPSA-65532
PACL - Rename PACLClassLoaderUtil to ClassLoaderUtil to begin uncluttering the portal of PACL naming
|
Justin Choi (Inactive)
|
Raymond Augรฉ
|
|
Closed |
Fixed
|
|
|
|
|
|
6.1.2 CE GA3, 6.1.30 EE GA3, 6.2.0 CE M4 |