CAS 3.2.1 and CGLib Proxy

Scott Battaglia scott.battaglia at gmail.com
Tue Apr 22 09:07:32 EDT 2008


Behrooz,

Can you provide more details on this? We have people using these features
without any problems.

-Scott

On Mon, Apr 21, 2008 at 8:11 AM, Behrooz Nobakht <behrooz.nobakht at gmail.com>
wrote:

> Hi,
>
> I have migrated to CAS 3.2.1 from 3.0.6.
>
> I use the following frameworks:
>
> * Spring 2.5
> * Acegi 1.0.6
> * Hibernate 3.2.5 (=> CGLib dependent)
> * CAS 3.2.1
>
> As I found out, for security reasons, some of the classes in CAS have been
> coded as *final* such as *DefaultServicesManagerImpl*, *
> DefaultTicketRegistryCleaner* and *CentralAuthenticationServiceImpl
>
> *On the other side, as there exists Hibernate and CGLib, so the default
> Proxy Manager will delegate to CGLib.
>
> These two cause problems:
>
> * Some of the final classes mentioned above have used *@Transactional*
> * CGLib needs to proxy the classes
> * The classes above are either *final* or have *no default constructor*.
> * CGLib throws an exception complaining the above ones.
>
> I would be happy for any comment.
>
> Thanks,
> Behrooz Nobakht
>
>
>
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>


-- 
-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20080422/a21881fc/attachment.html 


More information about the cas mailing list