This has to be driven by the security aspects and the usecases I outlined. The
SecurityAssociation is at best an implementation detail of some aspects. We should be
looking to propagate security context info via the invocation payload rather than thread
locals.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3991420#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...