Allow username to be specified in the requires list --------------------------------------------------- Key: JBWS-1136 URL: http://jira.jboss.com/jira/browse/JBWS-1136 Project: JBoss Web Services Issue Type: Feature Request Security Level: Public(Everyone can see) Components: ws-security Affects Versions: jbossws-1.0.1 Reporter: Darran Lofthouse Assigned To: Darran Lofthouse Fix For: jbossws-2.0.1 Allow username to be specified in the requires list for endpoints so that messages without the username can be rejected. At the moment for EJB endpoints they can be configured using standard J2EE security so if there is no authenticated user the request is rejected, however this can't be done for the POJO endpoints.