[jbossws-issues] [JBoss JIRA] (JBWS-3378) JSR 109 - explicit JAXWS handler authorization for EJB3 endpoints

JSR 109 - explicit JAXWS handler authorization for EJB3 endpoints ----------------------------------------------------------------- Key: JBWS-3378 URL: https://issues.jboss.org/browse/JBWS-3378 Project: JBoss Web Services Issue Type: Task Security Level: Public(Everyone can see) Components: jbossws-cxf, jbossws-integration Reporter: Richard Opalka Assignee: Alessio Soldano Fix For: jbossws-cxf-4.2.2 JSR 109 - Version 1.3 - Chapter 6.2.2.4 Security Handlers associated with a Port component run after authorization has occurred and before the business logic method of the Service Implementation bean is dispatched to. For JAX-RPC or JAX-WS Service endpoints, Handlers run after the container has performed the security constraint checks associated with the servlet element that defines the Port component. For EJB based service implementations, Handlers run after method level authorization has occurred.