How to secure only some functions of an EJB?

[mittal.neeraj]

I want to secure only setAttributes and invoke methods of the JSR 77 interface.

How to do that?

[starksm64]

The unchecked permission type allows one to access a method without any specific permission. The caller still needs to be an authenticated user, or the security domain configured to allow unauthenticated callers.

http://docs.jboss.com/jbossas/guides/j2eeguide/r2/en/html_single/#ch8.chapter