-
1. Re: @MethodPermissions for entity bean
bill.burke Jun 8, 2005 9:39 AM (in response to rkrylov)@MethodPermissions are not allowed for entity beans. The spec will eventually define security semantics for CRUD operations. Since entity beans are POJOs, they have no proxy in front of them and there is no way of doing interception of method calls (unless you used an AOP framework).
-
2. Re: @MethodPermissions for entity bean
rkrylov Jun 8, 2005 10:35 AM (in response to rkrylov)OK, but what is rationale for not having interceptors for entities in EJB 3 spec?
JBoss's AOP is jboss-specific :) -
3. Re: @MethodPermissions for entity bean
rkrylov Jun 8, 2005 10:43 AM (in response to rkrylov)The only difference between jboss-aop and ejb3 I see is '@Permissions' instead of '@MethodPermissions' annotations in entity beans.
-
4. Re: @MethodPermissions for entity bean
bill.burke Jun 8, 2005 11:52 AM (in response to rkrylov)then use jboss aop @Permission stuff. The EJB3 spec will not be defining method-level permissions for entities.
-
5. Re: @MethodPermissions for entity bean
bill.burke Jun 8, 2005 11:55 AM (in response to rkrylov)actually, I will ammend this: There is no talk about method-level permissions on entities currently being talked about in the EG.