[jboss-jira] [JBoss JIRA] Created: (EJBTHREE-807) Bean meta data does not include security role references

Anil Saldhana (JIRA) jira-events at jboss.com
Fri Dec 15 14:36:41 EST 2006


Bean meta data does not include security role references
--------------------------------------------------------

                 Key: EJBTHREE-807
                 URL: http://jira.jboss.com/jira/browse/EJBTHREE-807
             Project: EJB 3.0
          Issue Type: Task
          Components: Security
    Affects Versions: EJB 3.0 RC9 - Patch 1
            Reporter: Anil Saldhana
         Assigned To: Anil Saldhana
             Fix For: EJB 3.0 RC10 - FD


====================================
    <session>
      <ejb-name>SecTestEJB</ejb-name>
      <business-local>xxx</business-local>
      <ejb-class>xxx</ejb-cla
ss>
            <security-role-ref>
        <role-name>ADMIN</role-name>
        <role-link>Administrator</role-link>
      </security-role-ref> 
      <security-role-ref>
        <role-name>MGR</role-name>
        <role-link>Manager</role-link>
      </security-role-ref> 
    </session>
==================================================

There can be security role references configured at the bean level in ejb-jar.xml

The metadata that is parsed by the ejb3 metamodel does not recognize the security role references.

The isCallerInRole checks on the EnterpriseContext needs to be aware of these security role references.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the jboss-jira mailing list