0 Replies Latest reply on Aug 8, 2008 10:49 AM by andrea formica

    method permission via ejb-jar.xml ignored

    andrea formica Newbie

      Hi,
      I have a problem with security using jboss-4.2.2-GA
      I have managed to set permissions via annotations but I did not manage to set them via a partial ejb-jar.xml file

      Here is my ejb-jar.xml

      <?xml version="1.0" encoding="UTF-8"?>
      <ejb-jar xmlns = "http://java.sun.com/xml/ns/javaee"
       version = "3.0"
       xmlns:xsi = "http://www.w3.org/2001/XMLSchema-instance"
       xsi:schemaLocation = "http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/ejb-jar_3_0.xsd">
       <assembly-descriptor>
       <method-permission>
       <role-name>AlignW</role-name>
       <method>
       <ejb-name>AligniovDAOBean</ejb-name>
       <method-name>*</method-name>
       </method>
       </method-permission>
       </assembly-descriptor>
      </ejb-jar>
      


      Here is my jboss.xml :

      <!DOCTYPE jboss PUBLIC
       "-//JBoss//DTD JBOSS 4.0//EN"
       "http://www.jboss.org/j2ee/dtd/jboss_4_0.dtd">
      <jboss>
       <security-domain>AtlAlignDB</security-domain>
      </jboss>
      
      


      Both are in a jar file (under META-INF) containing some session beans.

      The login-config.xml under /server/default/conf contains the definition of the application policy.
      The packaging of my application is
      .ear/
      META-INF/application.xml
      <my-entity>.jar
      <my-session>.jar
      ....

      As I said, security is correctly taken into account via annotations, but any statement in ejb-jar about method permissions is ignored.

      Can you help me with that ?
      Thanks a lot for any hint you can provide

      Andrea Formica