Thanks for the quick reply. I do have another question. How do I take into account parameter based security?
Consider the following hypothetical scenerio.... I have a service that provides a access to a set of bools, a library service if you will. Anyone can gain access to the webservice, but only authors can modify books, but only their books. I understand how to prevent/allow access to the write-functions. But, how do I handle the webservice security for the which books actually are accessible to the author? The call to Book[] getAllBooksForEdit() would need to "hook" into the security module and make this business-specific access call. How is this best achieved? View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3855280#3855280 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3855280 ------------------------------------------------------- This SF.Net email is sponsored by: InterSystems CACHE FREE OODBMS DOWNLOAD - A multidimensional database that combines robust object and relational technologies, making it a perfect match for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8 _______________________________________________ JBoss-Development mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-development
