Hi all,
in my application I have a SFSB (Modify Bean) and 3 Roles (Ips, Aci, Prg).
Ips and Aci Roles can call all bean's methods.
Prg Role can call all bean's methods except possoInserire().

In ejb-jar.xml I have:


  | <method-permission >
  |          <description></description>
  |          <role-name>Ips</role-name>
  |          <role-name>Aci</role-name>
  |          <role-name>Prg</role-name>
  |          <method >
  |             <description></description>
  |             <ejb-name>Modify</ejb-name>
  |             <method-name>*</method-name>
  |          </method>
  | </method-permission>
  | 
  | <method-permission >
  |       <description></description>
  |          <role-name>Ips</role-name>
  |          <role-name>Aci</role-name>
  |       <method >
  |          <description></description>
  |          <ejb-name>Modify</ejb-name>
  |          <method-intf>Remote</method-intf>
  |          <method-name>possoInserire</method-name>
  |          <method-params>
  |          </method-params>
  |       </method>
  | </method-permission>
  | 
  | Even if I run as Prg role I can call possoInserire() method.
  | 
  | In server.log JBoss says that the method is callable by 
  | all the 3 Roles ??? 
  | Why ?
  | Method-permission infos must be replied in jboss.xml file ?
  | 
  | Any help is very appreciated.
  | Many thanks in advance
  | Moreno

View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3872525#3872525

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3872525


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
JBoss-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to