Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1069788

Summary:	Differences between tomcat and EAP business-central web.xml
Product:	[Retired] JBoss BPMS Platform 6	Reporter:	Radovan Synek <rsynek>
Component:	Business Central	Assignee:	Jan <jschatte>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Radovan Synek <rsynek>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6.0.1	CC:	kverlaen, mrietvel, rrajasek
Target Milestone:	ER2
Target Release:	6.0.1
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-08-06 20:02:51 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Radovan Synek 2014-02-25 16:37:47 UTC

Following differences in web.xml of business-central have been found, comparing generic deployable binaries and EAP deployable binaries after enabling configuration for JAAS on Tomcat (marked as "TOMCAT-JEE-SECURITY"):

1. missing security constraint for formModeler in generic deployable binaries

2. missing url pattern for *.erraiBus in security constraint in generic deployable binaries

3. parameter of UberFire security filter org.uberfire.cookie.id="kie.ide" (generic deployable binaries) vs. "kie.ide.console" (EAP deployable binaries)

Could you please double check if those differences are correct?

Comment 2 Jan 2014-02-27 17:27:43 UTC

Fixed in 

- 6.0.x: http://github.com/droolsjbpm/kie-wb-distributions/commit/286af6f66

- master: http://github.com/droolsjbpm/kie-wb-distributions/commit/ca198ffae

Comment 3 Jan 2014-02-28 10:32:02 UTC

Pending commit in the productization branch

Comment 4 Jan 2014-03-04 16:24:13 UTC

Changes are already in the productization branch (https://github.com/jboss-integration/kie-wb-distributions/tree/prod-6.0.1.GA.x-2014.02.28)

Comment 6 Radovan Synek 2014-03-06 09:55:36 UTC

Verified with BPMS-6.0.1.ER2

Comment 7 Radovan Synek 2014-03-18 16:06:54 UTC

qe_test_coverage: differences between EAP and generic binaries configuration, in addition a part that has been commented out by default.