[jboss-dev-forums] [Design of JBoss jBPM] - Re: commands & EJB 3

[camunda]

For the Authorization:

My idea was much easier, just to have a, let's say

  |   String[] getAllowedRoles
  | 

method in the Command. This returns the possible roles for the user. jBPM than can leave it up to the CommandService to do something with it, for example:
- use JACC
- use JAAS in the EJB-SessionBean
- own implementation...

With that you have it decoupled from the realization. Or what do you think?

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4012007#4012007

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4012007