Community

security declarations in ejb-jar.xml ignored?

reply from Daniel Lechner in EJB 3.0 - View the full discussion

jaikiran pai schrieb:

 

Daniel Lechner wrote:

 

  1. If I try to restrict the access by writing a * as method-name in the ejb-jar.xml file, only methods which are declared in the DAO class are taken into consideration. Methods from any base class can be accessed without restritcions!

 

Is that method from base class, exposed as a business interface method from the bean's business interface?

The business interface, which is annotated with @javax.ejb.Remote does not contain the mentioned methods itself, but inherits it from another interface. At the interfaces we have a similar hierarchie compared to that on the class side.

Reply to this message by going to Community

Start a new discussion in EJB 3.0 at Community