This content has been marked as final.
Show 3 replies
-
1. Re: How to disable authorization, but keep authentication
starksm64 Feb 21, 2005 2:02 PM (in response to borisn)Look into the unchecked element usage. This indicates that authentication is required, but no specific roles or authorization is needed.
-
2. Re: How to disable authorization, but keep authentication
borisn Feb 21, 2005 2:15 PM (in response to borisn)That's what I am doing now.
<method-permission> <unchecked/> <method> <ejb-name>Fibo</ejb-name> <method-name>*</method-name> </method> </method-permission>
But, I have to put it in all ejb-jar.xml files. So, I was wondering if there any other way to disable authorization.
Thanks
Boris -
3. Re: How to disable authorization, but keep authentication
starksm64 Feb 21, 2005 2:42 PM (in response to borisn)No standard mechanism. You can use a proprietary replacement for the org.jboss.ejb.plugins.SecurityInterceptor to do whatever you want.