[EJB/JBoss] - Trace used EJBs
by Nacho26
Hi,
We have an external "tracer" that needs to track which EJBs are used in an application to satisfy each individual client request. This "tracer" is an external program, which means that it runs in a different machine than the application server (JBoss) machine. What we need to do is to instrument/modify the middleware and/or communications layer between EJBs so that it sends a packet to the "tracer" indicating the EJBs used in a request. We think that we have to modify the EJB container to do this (but not sure). For example, when a client enters to the Welcome page, the application runs EJB1, EJB2 and EJB3. For this request, the "tracer" needs to receive a packet indicating that these three EJBs where used.
Any suggestion/idea?
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3985635#3985635
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3985635
19Â years, 7Â months
[JBoss Seam] - seam-security example
by aahamlin
In Seam 1.1 the security classes are available to setup an Authentication Provider and begin using the @Secure annotation. I've successfully run the examples\security application (after a few minor tweaks in the User and Role EJBs).
So, now my questions are: how do I use the annotations?
Specifically, the ProtectedAction class has a series of annotations and calls, which apparently work because I receive the security error when I'm not the 'admin' user, but for which I can not find documentation.
The foo() method's:
@Secure(permissions = {@Permission(name = "protected", action = "call")})
I get an error that I don't have permission but how do I setup a user/role with the necessary permissions?
The modifyCustomer() and modifyReadonlyCustomer() methods' both make these calls:
SeamSecurityManager.instance().checkPermission(customer, "modify");
Is this explicit call really necessary? There must be away to check permissions using an annotation.
BTW: the modifyReadonlyCustomer() method breaks when logged in as the 'admin' user but works fine when logged in as the 'user' user role.
Thanks for any more information on how to use this API. In comparison to all the other hoops there are to jump through in setting up JAAS security on Seam this setup seems much, much simpler and streamlined.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3985629#3985629
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3985629
19Â years, 7Â months