1 Reply Latest reply on Aug 30, 2006 10:24 AM by anil.saldhana

EJB3 issues with the Security Layer

anil.saldhana Aug 29, 2006 12:16 PM

http://www.jboss.com/index.html?module=bb&op=viewtopic&t=88989

Regarding the NPE in the SecurityContext class, not obtaining the requisite ApplicationPolicy(authentication/authorization info etc), I made some changes such that there is a SecurityConfiguration static class (starting today) from where the configuration is obtained.

But before that, there needs to be an MBean (or some way) by which the application policies are established prior to start making authentication/authorization checks.

It is your choice as to how the configuration is established in the embedded ejb3 world.

1. Re: EJB3 issues with the Security Layer

anil.saldhana Aug 30, 2006 10:24 AM (in response to anil.saldhana)

This has been fixed.

Carlo, once you are done with the RC9 release, I would like to review your security layer and remove redundancies such that changes to the JBoss Security layer does not mess your security needs.
Actions