[jboss-user] [EJB 3.0] - Security Annotations / Overriding annotations with deploymen

[zetzioni]

Hi,

It's a couple of questions really, the first is security related, second is annotation related:

1. Is it possible (in a standard non JBoss specific) to use @RolesAllowed and the rest of role based annotations but someohow override the default container behavior (which in JBoss is the rolebased interceptor)? The reason I"m asking that is, that in my application I need slightly different behavior for access control check than the standard, but I don't want to replace the whole security manager with JACC. So what I've done is avoid using the standard RolesAllowed annotations, and introduced MyRolesAllowed annotations. That way I will avoid invoking the standard mechanism of the container, and plugin my behavior as an EJB3 interceptor. Is there a way around it?

2. So I've created an annotation which I use to annotate bean methods @MyRolesAllowed, and I want to be able to override it for the method in the deployment descriptor. Can this supported? 

Thanks!

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4036972#4036972

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4036972