Hi,
I have a singleton session bean in JBoss AS 6.10. There's a method A that schedules a timer via the timer service.
When this method is called via a user that is authenticated in the web module, the @Timeout method has access to the principal that called this method A.
When this method is called via a service that has a @RunAS annotation, method A still has the right principal ("anonymous" with the run as role), but when the timeout method is called the principal is gone.
Any idea?
As it appears, according to the EJB 3.1 spec in both situations the unauthenticated identity should be returned in the @Timeout method.
See http://community.jboss.org/thread/175405 for more details.