[jboss-dev-forums] [Design of JBoss jBPM] - Re: commands & EJB 3

[tom.baeyens@jboss.com]

writing as i think....


  | public class WebRoleAuthorizationService implements AuthorizationService {
  | 
  |   public void checkPermission(Permission permission) throws AccessControlException {
  | 
  |   Permission mappedPermission = null;
  | 
  |   if (permission instanceof CommandPermission) {
  |     CommandPermission commandPermission = (CommandPermission) permission;
  |     Command command = commandPermission.getCommand();
  |     mappedPermission = new javax.security.jacc.WebRoleRefPermission(...map the command to a web role...);
  |   } else {
  |      ...map the other permissions...
  |   }
  | 
  |   SecurityManager sm = System.getSecurityManager();
  |   if (sm!=null) {
  |     sm.checkPermission(mappedPermission);
  |   }
  | }
  | 

does this show/illustrate the idea a bit ?

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4018476#4018476

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4018476