i have defined a user named 'defaultuser' as the unauthenticatedIdentity in my login-config.xml file. I am storing all the roles in the DB. Im in need to have this defaultuser able to access any ejb session bean method(s). so either i should have all the roles assigned to him, or have ejb configured to allow the defaultuser to access any session bean method.
I do prefer the second option of having the container allowing this user to access any method without checking his principal role list. How do i do this but?