Owner role

[saconni]

Hi!

i think this should be a very usual situation.
i need to give certain roles to the loged principal dependig on if he/she owns the object that is instanced. i tried to find a solution for this... but the only way that i found to solve this is using a security proxy (and actually i am not giving roles to the principal, just filtering the method callings with the proxy). And i really need/want to manage the owner methods usign the descriptors.

Does anybody knows a secure and elegant way to do this?

i'm sorry if this question was answered before... i searched for a solution but couldn't find it.

thanks every body

[starksm64]

Ownership is not a declarative statement. Its a context sensitive statement due to the fact that ownership is a relationship, and therefore cannot in general be expressed using the j2ee declarative security model.

[saconni]

thanks scott...
so... is not posible to avoid using security proxies in this situation?