1 Reply Latest reply on Oct 30, 2003 10:18 AM by adrian.brock

    Principal used to invoke ejbRemove of MDB

      I have a message driven bean that creates a stateless session bean in its ejbCreate and tries to remove it in its ejbRemove method. Access to the stateless session bean is granted for user "Admin", the MDB has run-as "Admin".

      Usually everything works fine. When I close down JBoss, however, there is an exception in the ejbRemove of the MDB saying that it does not have the priviledges to remove the session bean (this is right, because it reports the current principal being "null" and the required principal being "Admin").

      What principal is used by JBoss when it calls ejbRemove? Shouldn't it also be the run-as principal used in "onMessage" and "ejbCreate"? Is this a bug?

      - Michael

        • 1. Re: Principal used to invoke ejbRemove of MDB

          ejbRemove for an MDB is invoked by the server, it does not
          have an associated security context.
          You will have to establish one with a jaas login using
          the client-login context for example.

          ejbRemove on a StatelessSessionBean is fruitless. The
          container will ignore it.

          Regards,
          Adrian