I am back and I think I have found the root cause this time.
First I reverted my changes to JmsXARealm in logon-config.xml as Adrian 
indicated that I should not make unconsidered changes like that.

That also reverted my problem to getting

  | Caused by: javax.jms.JMSSecurityException: Connection not authorized to 
addMessages to destination: SendMail
  |         at 
org.jboss.mq.security.ServerSecurityInterceptor.transact(ServerSecurityInterceptor.java:166)
  |         at 
org.jboss.mq.server.TracingInterceptor.transact(TracingInterceptor.java:438)
  | 
I decided to debug ServerSecurityInterceptor and found that it is using the 
caller identity. Now I have not set up security on any of my beans, but the 
interceptor is using guest/guest as values and my topics are only allowing the 
role bluespacepublisher with attached user bspub to write to topics. Hence, the 
security exception.

Next question is, how do I actually solve this. Of course I can change things 
so that guest is allowed to write but I don't really want to do that. This 
would only work around the problem and leave a big hole in the security net of 
my app.

Is the only proper solution to set up security on method level with a user that 
is also allowed to write to topics? Don't shoot me Adrian if this is another 
obvious question ;-)

Many thanks,

Rudi

View the original post : 
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3908742#3908742

Reply to the post : 
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3908742


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
JBoss-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to