[
https://issues.jboss.org/browse/JBWS-3378?page=com.atlassian.jira.plugin....
]
Richard Opalka updated JBWS-3378:
---------------------------------
Summary: Both JAXWS & JAXRPC handlers have to be executed in EJB component
interceptor (was: Both JAXWS & JAXRPC handlers have to be executed in EJB interceptor
after EJB security interceptors)
Description:
JSR 109 - Version 1.3 - Chapter 6.2.2.4 Security
Handlers associated with a Port component run after authorization has occurred and before
the business logic
method of the Service Implementation bean is dispatched to. For JAX-RPC or JAX-WS Service
endpoints,
Handlers run after the container has performed the security constraint checks associated
with the servlet
element that defines the Port component. For EJB based service implementations, Handlers
run after method
level authorization has occurred.
JSR 109 - Version 1.3 - Chapter 6.2.2.5 Transactions
Handlers run under the transaction context of the component they are associated with.
was:
JSR 109 - Version 1.3 - Chapter 6.2.2.4 Security
Handlers associated with a Port component run after authorization has occurred and before
the business logic
method of the Service Implementation bean is dispatched to. For JAX-RPC or JAX-WS Service
endpoints,
Handlers run after the container has performed the security constraint checks associated
with the servlet
element that defines the Port component. For EJB based service implementations, Handlers
run after method
level authorization has occurred.
Both JAXWS & JAXRPC handlers have to be executed in EJB component
interceptor
-----------------------------------------------------------------------------
Key: JBWS-3378
URL:
https://issues.jboss.org/browse/JBWS-3378
Project: JBoss Web Services
Issue Type: Sub-task
Security Level: Public(Everyone can see)
Reporter: Richard Opalka
Assignee: Richard Opalka
Fix For: jbossws-native-4.0, jbossws-cxf-4.0
JSR 109 - Version 1.3 - Chapter 6.2.2.4 Security
Handlers associated with a Port component run after authorization has occurred and before
the business logic
method of the Service Implementation bean is dispatched to. For JAX-RPC or JAX-WS Service
endpoints,
Handlers run after the container has performed the security constraint checks associated
with the servlet
element that defines the Port component. For EJB based service implementations, Handlers
run after method
level authorization has occurred.
JSR 109 - Version 1.3 - Chapter 6.2.2.5 Transactions
Handlers run under the transaction context of the component they are associated with.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see:
http://www.atlassian.com/software/jira