User: starksm 
  Date: 01/06/12 00:58:41

  Modified:    src/resources/security/META-INF ejb-jar.xml
  Log:
  Add tests of the EJB2.0 unchecked and exclude-list permission elements
  
  Revision  Changes    Path
  1.4       +71 -45    jbosstest/src/resources/security/META-INF/ejb-jar.xml
  
  Index: ejb-jar.xml
  ===================================================================
  RCS file: /cvsroot/jboss/jbosstest/src/resources/security/META-INF/ejb-jar.xml,v
  retrieving revision 1.3
  retrieving revision 1.4
  diff -u -r1.3 -r1.4
  --- ejb-jar.xml       2001/05/22 03:20:24     1.3
  +++ ejb-jar.xml       2001/06/12 07:58:41     1.4
  @@ -109,49 +109,75 @@
           </entity>
       </enterprise-beans>
   
  -  <assembly-descriptor>
  -    <security-role>
  -        <description>The role required to invoke the echo method</description>
  -        <role-name>Echo</role-name>
  -    </security-role>
  -
  -    <method-permission>
  -      <role-name>Echo</role-name>
  -
  -      <method>
  -        <ejb-name>StatelessSession</ejb-name>
  -        <method-name>create</method-name>
  -      </method>
  -      <method>
  -        <ejb-name>StatelessSession</ejb-name>
  -        <method-name>remove</method-name>
  -      </method>  
  -      <method>
  -        <ejb-name>StatelessSession</ejb-name>
  -        <method-name>echo</method-name>
  -      </method>
  -      <method>
  -        <ejb-name>StatelessSession</ejb-name>
  -        <method-name>npeError</method-name>
  -      </method>
  -
  -      <method>
  -        <ejb-name>StatelessSession2</ejb-name>
  -        <method-name>*</method-name>
  -      </method>
  -
  -      <method>
  -        <ejb-name>Entity</ejb-name>
  -        <method-name>*</method-name>
  -      </method>
  -    </method-permission>
  -
  -    <method-permission>
  -      <role-name>ProjectUser</role-name>
  -      <method>
  -        <ejb-name>ProjRepository</ejb-name>
  -        <method-name>*</method-name>
  -      </method>
  -    </method-permission>
  -  </assembly-descriptor>
  +    <assembly-descriptor>
  +        <security-role>
  +            <description>The role required to invoke the echo method</description>
  +            <role-name>Echo</role-name>
  +        </security-role>
  +
  +        <!-- The methods the Echo role can access -->
  +        <method-permission>
  +            <role-name>Echo</role-name>
  +
  +            <method>
  +                <ejb-name>StatelessSession</ejb-name>
  +                <method-name>create</method-name>
  +            </method>
  +            <method>
  +                <ejb-name>StatelessSession</ejb-name>
  +                <method-name>remove</method-name>
  +            </method>  
  +            <method>
  +                <ejb-name>StatelessSession</ejb-name>
  +                <method-name>echo</method-name>
  +            </method>
  +            <method>
  +                <ejb-name>StatelessSession</ejb-name>
  +                <method-name>npeError</method-name>
  +            </method>
  +
  +            <method>
  +                <ejb-name>StatelessSession2</ejb-name>
  +                <method-name>*</method-name>
  +            </method>
  +
  +            <method>
  +                <ejb-name>Entity</ejb-name>
  +                <method-name>*</method-name>
  +            </method>
  +        </method-permission>
  +
  +        <!-- Anyone can access the unchecked() method of the StatelessSession bean 
-->
  +        <method-permission>
  +            <unchecked/>
  +            <method>
  +                <ejb-name>StatelessSession</ejb-name>
  +                <method-name>unchecked</method-name>
  +            </method>
  +        </method-permission>
  +
  +        <method-permission>
  +            <role-name>ProjectUser</role-name>
  +            <method>
  +                <ejb-name>ProjRepository</ejb-name>
  +                <method-name>*</method-name>
  +            </method>
  +        </method-permission>
  +
  +        <!-- No one can access the excluded() method of the
  +            StatelessSession and StatelessSession2 beans -->
  +        <exclude-list>
  +            <description>A method that no one can access in this 
deployment</description>
  +            <method>
  +                <ejb-name>StatelessSession</ejb-name>
  +                <method-name>excluded</method-name>
  +            </method>
  +            <method>
  +                <ejb-name>StatelessSession2</ejb-name>
  +                <method-name>excluded</method-name>
  +            </method>
  +        </exclude-list>
  +
  +    </assembly-descriptor>
  +
   </ejb-jar>
  
  
  

_______________________________________________
Jboss-development mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to