[jbossws-dev] [Design of JBoss Web Services] - Re: JBAS-4890:EJBAccessException: Caller unauthorized

[anil.saldhana@jboss.com]

"scott.stark at jboss.org" wrote : That was what my TODO question was about. 
Yeah, we still push a null runas (as per my latest change). Wonder why u pushed an "anonymous", rather than a null? 

RunAs takes preference in authorization and programmatic security (isUserxxx. isCallerXXX, getCallerP).

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4098550#4098550

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4098550