Hi,
I have configured JBoss 4.0.5 for role-based authorization as suggested in the technical white paper Securing JMX:
https://issues.jboss.org/browse/SECURITY-31
I have set up and tested different roles using the ExernalizableRolesAuthorization class in jmx-invoker-service.xml as suggested in the white paper.
How can I configure fine-grained role based security for MBeans that are accessed via the jmx invocation layer?
For example, I would like to limit access to a specific MBean and MBean methods to a specific role.
I'd like to make this configuration with JBoss configuration files changes, MBean descriptors or other configuration methods.
One alternative is to write my own AuthorizationInterceptor class but a configuration solution is preferable and I would really appreciate a configuration example.
Thank you,
Kamen
