Do authentication with jaas. For authorisation I suggest EJB3 interceptors. In the
interceptor you can check the permissions for a principal (-> context information).
For lean code you may define own permission annotations for the facades methods. In the
interceptor you access these metadata.
HTH Dieter
View the original post :
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4210394#...
Reply to the post :
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...