Rick Horowitz wrote:
> I'm using an MVC architecture in which the view is implemented by JSPs,
> the controller by servlets, and the model by EJBs. In this architecture,
> I'm planning to use JAAS 1.0 to enforce security at the servlet level.
> Each request by a user will be checked against the JAAS policy to see if
> it is authorized for that user prior to letting the servlet process the
> request. Does jBoss do anything that will cause this not to work
> correctly, like using a new SecurityManager that will mess it up, or
> possibly the classloading approach jBoss uses?
I don't know at this point.
> btw, is there an explanation somewhere about how you are using
> classloaders? I'd be very interested in reading it.
No. The source code is a close as it gets. I will make some kind of
arch. doc. of jBoss when I get the time.
/Rickard
--
Rickard �berg
Email: [EMAIL PROTECTED]
http://www.telkel.com
http://www.jboss.org
http://www.dreambean.com
--
--------------------------------------------------------------
To subscribe: [EMAIL PROTECTED]
To unsubscribe: [EMAIL PROTECTED]
Problems?: [EMAIL PROTECTED]
