add privileged block in logout

lvcargnini · Aug 23, 2017 · b9de755 · b9de755
1 parent cf5d56c
commit b9de755
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/appserver/security/webintegration/src/main/java/com/sun/web/security/RealmAdapter.java b/appserver/security/webintegration/src/main/java/com/sun/web/security/RealmAdapter.java
@@ -517,7 +517,12 @@ private void doLogout(HttpRequest request, boolean extensionEnabled) {
     @Override
     public void logout() {
         setSecurityContext(null);
-        resetPolicyContext();
+        AccessController.doPrivileged(new PrivilegedAction<Void>() {
+            public Void run() {
+                resetPolicyContext();
+                return null;
+            }
+        });
     }
 
     public Principal authenticate(HttpServletRequest hreq) {