[jbossws-issues] [JBoss JIRA] (JBWS-3378) Both JAXWS & JAXRPC handlers have to be executed in EJB interceptor after EJB security interceptors

[Richard Opalka (Updated) (JIRA)]

     [ https://issues.jboss.org/browse/JBWS-3378?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Richard Opalka updated JBWS-3378:
---------------------------------

         Assignee: Richard Opalka
    Fix Version/s: jbossws-native-4.0
                    jbossws-cxf-4.0
      Description: 
JSR 109 - Version 1.3 - Chapter 6.2.2.4 Security
 
Handlers associated with a Port component run after authorization has occurred and before the business logic
method of the Service Implementation bean is dispatched to. For JAX-RPC or JAX-WS Service endpoints,
Handlers run after the container has performed the security constraint checks associated with the servlet
element that defines the Port component. For EJB based service implementations, Handlers run after method
level authorization has occurred.

  was:
6.2.2.4 Security
 
Handlers associated with a Port component run after authorization has occurred and before the business logic
method of the Service Implementation bean is dispatched to. For JAX-RPC or JAX-WS Service endpoints,
Handlers run after the container has performed the security constraint checks associated with the servlet
element that defines the Port component. For EJB based service implementations, Handlers run after method
level authorization has occurred.


    
> Both JAXWS & JAXRPC handlers have to be executed in EJB interceptor after EJB security interceptors
> ---------------------------------------------------------------------------------------------------
>
>                 Key: JBWS-3378
>                 URL: https://issues.jboss.org/browse/JBWS-3378
>             Project: JBoss Web Services
>          Issue Type: Sub-task
>      Security Level: Public(Everyone can see) 
>            Reporter: Richard Opalka
>            Assignee: Richard Opalka
>             Fix For: jbossws-native-4.0,  jbossws-cxf-4.0
>
>
> JSR 109 - Version 1.3 - Chapter 6.2.2.4 Security
>  
> Handlers associated with a Port component run after authorization has occurred and before the business logic
> method of the Service Implementation bean is dispatched to. For JAX-RPC or JAX-WS Service endpoints,
> Handlers run after the container has performed the security constraint checks associated with the servlet
> element that defines the Port component. For EJB based service implementations, Handlers run after method
> level authorization has occurred.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira