[jboss-user] [Security & JAAS/JBoss] - method permission via ejb-jar.xml ignored

Hi, I have a problem with security using jboss-4.2.2-GA I have managed to set permissions via annotations but I did not manage to set them via a partial ejb-jar.xml file Here is my ejb-jar.xml | <?xml version="1.0" encoding="UTF-8"?> | <ejb-jar xmlns = "http://java.sun.com/xml/ns/javaee" | version = "3.0" | xmlns:xsi = "http://www.w3.org/2001/XMLSchema-instance" | xsi:schemaLocation = "http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/ejb-jar_3_0.xsd"> | <assembly-descriptor> | <method-permission> | <role-name>AlignW</role-name> | <method> | <ejb-name>AligniovDAOBean</ejb-name> | <method-name>*</method-name> | </method> | </method-permission> | </assembly-descriptor> | </ejb-jar> | Here is my jboss.xml : | <!DOCTYPE jboss PUBLIC | "-//JBoss//DTD JBOSS 4.0//EN" | "http://www.jboss.org/j2ee/dtd/jboss_4_0.dtd"> | <jboss> | <security-domain>AtlAlignDB</security-domain> | </jboss> | | Both are in a jar file (under META-INF) containing some session beans. The login-config.xml under /server/default/conf contains the definition of the application policy. The packaging of my application is .ear/ META-INF/application.xml <my-entity>.jar <my-session>.jar .... As I said, security is correctly taken into account via annotations, but any statement in ejb-jar about method permissions is ignored. Can you help me with that ? Thanks a lot for any hint you can provide Andrea Formica View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4169617#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...