This content has been marked as final.
Show 3 replies
-
1. Re: Cannot access secured SB from MDB despite run-as set cor
starksm64 Apr 5, 2005 10:31 AM (in response to ottoberg)run-as sets the role of the caller, but if there is no authenticated caller, then the security domain receiving the call has to all unauthenticated callers. run-as is a grant of a role, not identity.
-
2. Re: Cannot access secured SB from MDB despite run-as set cor
ottoberg Apr 5, 2005 11:35 AM (in response to ottoberg)"scott.stark@jboss.org" wrote:
run-as sets the role of the caller, but if there is no authenticated caller, then the security domain receiving the call has to all unauthenticated callers. run-as is a grant of a role, not identity.
Yes, I figured that out. So if I mark an MDB with run-as="myrole" I still have to explicitly login via JAAS prior to accessing a secured resource, but the roleset assigned to my newly established Subject will get replaced by "myrole"?
Olaf -
3. Re: Cannot access secured SB from MDB despite run-as set cor
starksm64 Apr 5, 2005 11:42 AM (in response to ottoberg)Yes.