[jboss-user] [Security & JAAS/JBoss] - Re: Dynamicaly manage role permissions

dsteinwe do-not-reply at jboss.com
Mon Feb 16 10:47:35 EST 2009

Do authentication with jaas. For authorisation I suggest EJB3 interceptors. In the interceptor you can check the permissions for a principal (-> context information).
For lean code you may define own permission annotations for the facades methods. In the interceptor you access these metadata. 

HTH Dieter

View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4210394#4210394

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4210394

More information about the jboss-user mailing list