[jboss-dev-forums] [Design of Security on JBoss] - Re: SecurityContext

[anil.saldhana@jboss.com]

Two questions:
a) On the server side, can I know if the call originated within the same vm or not? Do I need to put something on the invocation via the InvokerInterceptor?

b) Is there anything equivalent to ServletRequest.isSecure() for jboss ejb invocations? I do not think so looking at the Invocation interface. What is the right way to inject transport semantics(like ssl) into the invocation?

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3998140#3998140

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3998140