Hello,
> -----Original Message-----
> From: Sternagel Annegret (PN-SYS/PE) [SMTP:[EMAIL PROTECTED]]
> Sent: 15 January 2002 12:06
> To: [EMAIL PROTECTED]
> Subject: [JBoss-user] security method-permission
>
> Hello,
>
> I asked this question on the list already but didn't get an answer, maybe
> the description was not clear enough ?
>
> Now I reproduced the problem with the howto-sample from the jboss docs and
> asked in the forum, but it's down now :(
> Therefore I'll try here again:
>
> Remember the method permission set in the sample:
> Users with role 'Coder' are allowed to call the methods create() and
> noop()
> on StatefulSession but are not allowed to call method echo().
>
> From the client point of view I would expect the following behavior:
> call StatefulSession.create() => ok
> call StatefulSession.noop() => ok
> call StatefulSession.echo() => SecurityException
> call StatefulSession.noop() => ok
>
> but what happens is
> call StatefulSession.create() => ok
> call StatefulSession.noop() => ok
> call StatefulSession.echo() => SecurityException
> call StatefulSession.noop() => TRANSACTION ROLLBACK EXCEPTION:Could not
> activate; nested
> exception is: java.io.FileNotFoundException:
> D:\ProgramFiles\...\1010399848332.ser
>
> I'm afraid this is according to the spec and the container discards the
> bean
> after a SecurityException, is that right ?
[Schouten, Andreas]
Yes
> What do I have to do to get the expected behavior ?
[Schouten, Andreas]
The implementation of echo() should catch the security exception and
throw a RemoteException. Than the container must not discard the bean.
> Does the client have to check before calling the method echo() (That's not
> what I would like to do) ?
> I can't expect the client to recreate the bean after insufficient method
> call, this may result in the loss of userchanges.
>
> Any ideas ?
> Thanks in advance
> Annegret
>
>
>
>
>
> _______________________________________________
> JBoss-user mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/jboss-user
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user
