Hello,

I have an ear file that contains secured EJBs.  The beans are coded using EJB3 
annotations @Local, @Stateless and are secured using @DeclareRoles, 
@RolesAllowed, and @SecurityDomain.  

Everything seems to deploy perfectly and I can get the bean instance from JNDI 
from a servlet located in a different EAR but in the save JBoss instance. 

My questions is regarding security role references.  My beans are coded with 
@RolesAllowed({"UserRole"}) but the role in the database for the users is "USER 
ROLE".  Because of this, I know I need to use some sort of security role 
referencing to map "USER ROLE" to "UserRole". Since I'm using annotations to 
code my EJBs, how can I do this?

I've tried to add the following to jboss-app.xml in the ear that contains the 
EJBs but it did not work.

<security-role>
      <role-name>UserRole</role-name>
      <principal-name>USER ROLE</principal-name>
</security-role>

Can anyone help me?  All beans will have the same roles so I want to do this on 
globally.  I though the jboss-app.xml would work.  I'm I doing something wrong?

I'm using JBoss 4.2.3, JAVA 6, EJB3.

View the original post : 
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4192888#4192888

Reply to the post : 
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4192888
_______________________________________________
jboss-user mailing list
[email protected]
https://lists.jboss.org/mailman/listinfo/jboss-user

Reply via email to