executeTx: SecurityException..requiredRoles=[], principalRol

[andiwauss]

Hello,

I get this exception when trying to transfer funds within the DukesBank having ejb-security enabled.
After I got this exception in 4.0.0 I saw that certain security-issues were fixed within 4.0.1RC1, but with RC1 it still does not work. (Even having set<module-option name="unauthenticatedIdentity">anonymous</module-option>)

Does anyone have any idea?
Thanks in advance,
Andreas




10:40:42,077 INFO [STDOUT] Debug: TxControllerBean releaseConnection
10:40:42,078 ERROR [LogInterceptor] EJBException in method: public abstract void com.sun.ebank.ejb.tx.TxController.transferFunds(java.math.BigDecimal,java.lang.String,java.lang.String,java.lang.String) throws java.rmi.RemoteException,com.sun.ebank.ejb.exception.InvalidParameterException,com.sun.ebank.ejb.exception.AccountNotFoundException,com.sun.ebank.ejb.exception.InsufficientFundsException,com.sun.ebank.ejb.exception.InsufficientCreditException:
javax.ejb.EJBException: executeTx: SecurityException; CausedByException is:
Insufficient method permissions, principal=200, method=create, interface=LOCALHOME, requiredRoles=[], principalRoles=[bankAdmin, bankCustomer]
at com.sun.ebank.ejb.tx.TxControllerBean.executeTx(TxControllerBean.java:268)

[andiwauss]

I had to extend the ejb-jar.xml by

<role-name>bankCustomer</role-name>

<ejb-name>CustomerBean</ejb-name>
<method-intf>LocalHome</method-intf>
<method-name>*</method-name>


<ejb-name>CustomerBean</ejb-name>
<method-intf>Local</method-intf>
<method-name>*</method-name>



<ejb-name>TxBean</ejb-name>
<method-intf>LocalHome</method-intf>
<method-name>*</method-name>



<ejb-name>TxBean</ejb-name>
<method-intf>Local</method-intf>
<method-name>*</method-name>