JSR 250 - Common Annotations

[shamoh]

Hello.

I would like to ask if there is any relation of JBoss Seam and JSR 250, especially security support.

JSR 250 defines common annotations, e.g.
* javax.annotation.security.PermitAll
* javax.annotation.security.DenyAll
* javax.annotation.security.RolesAllowed
* javax.annotation.security.DeclareRoles
* javax.annotation.security.RunAs

And Seam defines self security annotation (and other security API):
* org.jboss.seam.annotations.security.Restrict

I would like to know if both solutions work together or I have to use just one of them?

Thanks,
-lk

[norman.richards]

The EJB3 container will apply those security restrictions based on it's security model. I believe Seam security does add roles to the JAAS subject, so I'd imagine those annotations would work with Seam-managed security on JBoss. I doubt it would work on other appservers, since security implementation is not standardized across servers.