Hello, I asked this question on the list already but didn't get an answer, maybe the description was not clear enough ?
Now I reproduced the problem with the howto-sample from the jboss docs and asked in the forum, but it's down now :( Therefore I'll try here again: Remember the method permission set in the sample: Users with role 'Coder' are allowed to call the methods create() and noop() on StatefulSession but are not allowed to call method echo(). >From the client point of view I would expect the following behavior: call StatefulSession.create() => ok call StatefulSession.noop() => ok call StatefulSession.echo() => SecurityException call StatefulSession.noop() => ok but what happens is call StatefulSession.create() => ok call StatefulSession.noop() => ok call StatefulSession.echo() => SecurityException call StatefulSession.noop() => TRANSACTION ROLLBACK EXCEPTION:Could not activate; nested exception is: java.io.FileNotFoundException: D:\ProgramFiles\...\1010399848332.ser I'm afraid this is according to the spec and the container discards the bean after a SecurityException, is that right ? What do I have to do to get the expected behavior ? Does the client have to check before calling the method echo() (That's not what I would like to do) ? I can't expect the client to recreate the bean after insufficient method call, this may result in the loss of userchanges. Any ideas ? Thanks in advance Annegret _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
