securing JAR-RPC 1.1 endpoints

[new4jboss]

Hello,

I've searched but found no reference on how to specify declarative access control for POJO endpoints. Apparently, authorization would be specified at the url level as in normal servlets, but that would involve knowing how the wsdl operation map to the urls, which I don't know. Furthemore, I need a portable way to do it and I believe ws4ee 1.1 is silent on this.

Can anyone help me on this ?

Thanks

[thomas.diesler]

http://wiki.jboss.org/wiki/Wiki.jsp?page=WSSecureEndpoint

[new4jboss]

Thanks for answering Thomas, but I've already been through that link. It only applies to SLSB though, which is not my problem. Are you saying that to have declarative security in a ws4ee portable way , I should use SLSB endpoints instead of JAX-RPC ones ?

Thanks

[thomas.diesler]

You can have the same declarative security in web.xml for java service endpoints (JSE). Securing a JSE is no different to securing a webapp.