0 Replies Latest reply on Mar 9, 2007 11:39 AM by luker74

    Insufficient permissions

    luker74

      Hi all, i've got this message on jboss 3.2.8sp1:

      Insufficient method permissions, principal=null, ejbName=UserAdmin, method=create, interface=LOCALHOME, requiredRoles=[ruolo1], principalRoles=[]


      I'm trying to access a local ejb from a struts action servlet made by me.

      I put this line in jboss.xml file :
      <security-domain>java:/jaas/storename</security-domain>

      then this is my jboss-web.xml file:
      <jboss-web>

      <security-domain>java:/jaas/storename</security-domain>
      <ejb-local-ref>
      <ejb-ref-name>ejb/UserAdmin</ejb-ref-name>
      <jndi-name>storename/UserAdmin</jndi-name>
      </ejb-local-ref>
      </jboss-web>

      and this is the ejb-jar.xml:

      <ejb-jar>
      ....



      <display-name>Name for UserAdmin</display-name>

      <ejb-name>UserAdmin</ejb-name>

      <local-home>it.ausystems.progettoejb.interfaces.UserAdminLocalHome</local-home>
      it.ausystems.progettoejb.interfaces.UserAdminLocal

      <ejb-class>it.ausystems.progettoejb.ejb.UserAdminCMP</ejb-class>
      <persistence-type>Container</persistence-type>
      <prim-key-class>java.lang.String</prim-key-class>
      False
      <cmp-version>2.x</cmp-version>
      <abstract-schema-name>UserAdmin</abstract-schema-name>
      <cmp-field >

      <field-name>username</field-name>
      </cmp-field>
      <cmp-field >

      <field-name>passwd</field-name>
      </cmp-field>
      <primkey-field>username</primkey-field>

      <security-role-ref>
      <role-name>ruolo1</role-name>
      <role-link>ruolo1</role-link>
      </security-role-ref>

      <security-identity>
      <run-as>
      <role-name>ruolo1</role-name>
      </run-as>
      </security-identity>


      <query-method>
      <method-name>findByPrimaryKey</method-name>
      <method-params>
      <method-param>java.lang.String</method-param>
      </method-params>
      </query-method>
      <ejb-ql/>

      <!-- Write a file named ejb-finders-UserAdmin.xml if you want to define extra finders. -->


      ....

      <assembly-descriptor>
      <security-role>

      <role-name>ruolo1</role-name>
      </security-role>

      <!-- method permissions -->
      <!--
      To specify additional method-permission elements, add a file in the merge
      directory called ejb-method-permissions.ent that contains them.
      -->

      <method-permission >

      <role-name>ruolo1</role-name>


      <ejb-name>UserAdmin</ejb-name>
      <method-name>*</method-name>

      </method-permission>
      </assembly-descriptor>



      can anyone help me?

      thanx