Hmm. not working.
I add information to the ejb-jar.xml
| <assembly-descriptor> |
| | <security-role> |
| | | <role-name>friend</role-name> |
| | </security-role> |
| | <method-permission> |
| | | <role-name>friend</role-name> |
| | | <method> |
| | | | <ejb-name>MyServicePortImpl</ejb-name> |
| | | | <method-name>login</method-name> |
| | | </method> |
| | </method-permission> |
| | <method-permission> |
| | | <unchecked/> |
| | | <method> |
| | | | <ejb-name>MyServicePortImpl</ejb-name> |
| | | | <method-name>foo</method-name> |
| | | </method> |
| | </method-permission> |
| </assembly-descriptor> |
But both methods are still being checked.
Perhaps I haven't named the EJB correctly? In an ejb-based web service, what is the ejb name that should be used in ejb-jar.xml?