New subject: [EJB3] - Re: Konfiguratio of security domains in JBoss AS 6 with EJB 3.1

Friday, 5 November 2010

SÃ¼leyman Vurucu [http://community.jboss.org/people/suikast42] created the discussion

"Konfiguratio of security domains in JBoss AS 6 with EJB 3.1"

To view the discussion, visit: http://community.jboss.org/message/569827#569827

--------------------------------------------------------------
Hi @ all,

My Environment at first:

Aplication Sevrer :      jboss-6.0.0.20100911-M5 (default configuration without any
changes)
IDE:                          Eclipse 3.6
Jboss Tools               V 3.2
Java Version:             JDK 1.6 U 20
OS:                          Windows Vista 32 Bit

My Problem:

I Create a test Application. It Contains only one Stateless Bean with local and remote
interfaces:

*package* beans.stateless;

*import* interfaces.stateless.FirstStatelessBeanLocal;
*import* interfaces.stateless.FirstStatelessBeanRemote;

*import* javax.annotation.*;
*import* javax.annotation.security.*;
*import* javax.ejb.*;

*import* org.apache.commons.logging.*;
*import* org.jboss.aop.*;
*import* org.jboss.beans.metadata.api.annotations.*;
*import* org.jboss.security.annotation.*;

/**
 * Session Bean implementation class FirstStatelessBean
 */
@Stateless
@SecurityDomain("JBossWS")
@RolesAllowed("{friend}")
*public* *class* FirstStatelessBean *implements* FirstStatelessBeanRemote,
FirstStatelessBeanLocal {

    /**
     * Default constructor.
     */
    *private* int    pCounterLocal    = 0;
    *private* int    pCounterRemote    = 0;

    @Resource
    *private* SessionContext myCtx ; 

    *public* FirstStatelessBean() {
    }

    @PreDestroy
    *public* *void* destroy() {
        LogFactory.getLog( getClass() ).warn( "Destroy" );
        pCounterLocal=0;
        pCounterRemote=0;
    }

    @PostConstruct
    *public* *void* create(){
        LogFactory.getLog( getClass() ).warn( "Create" );
    }

    @Override
    *public* String sayHelloLocal( String pMesssage ) {
        String lMessage = "Hello Local to " + pMesssage + " " + (
++pCounterLocal ) + " Times";
        LogFactory.getLog( getClass() ).info( lMessage );
        *return* lMessage;
    }

    @Override
    *public* String sayHelloRemote( String pMesssage ) {
        String lMessage = "Hello Remote to " + pMesssage + " " + (
++pCounterRemote ) + " Times";
        LogFactory.getLog( getClass() ).info( lMessage );
//      LogFactory.getLog( getClass() ).info( myCtx.getCallerPrincipal() );
        *return* lMessage;
    }

    @Override
    @PrePassivate
    *public* *void* passviate() {
        LogFactory.getLog( getClass() ).warn( "Passivate" );        
    }

}

On The Client side I get the JNDI Refrence on the following way:

Properties p = *new* Properties();
                p.put( Context.INITIAL_CONTEXT_FACTORY,
"org.jnp.interfaces.NamingContextFactory" );
                p.put( Context.PROVIDER_URL, "jnp://" + pServerAddr +
":" + pServerPort );
InitialContext jndiContext = *new* InitialContext( p );

So  my excpected behavior (when I call sayHelloRemote) is an Exception. But  this request
still works with worong user information.

So what I'm doing wrong ?

I try the example from
http://community.jboss.org/wiki/Chapter15-SecurityandSchoolEJBAccess
(http://community.jboss.org/docs/DOC-15571) as well. But the result i the same. I can call
every method withaout an exception. And when I call getCallerPrincipal from SessionContext
I get an Exception. This occurs while the bean don't in a security domain am I rigth
?
--------------------------------------------------------------

Reply to this message by going to Community
[http://community.jboss.org/message/569827#569827]

Start a new discussion in EJB3 at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&...]

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

[EJB3] - Konfiguratio of security domains in JBoss AS 6 with EJB 3.1