Re: If I implement my own SecurityService, what/when/how gets called?

[SG]

Phillipe, thanks for the response. I actually know all that. But my question is: Given that I will have my SecurityService in jonas.properties, when does it actually get called: 1. During Initialization 2. When a client starts accessing What I need my security service to do is set the client's principle. As far as i can see, this needs to be done before they even try to call the "create" method on the BeanHome. So I want to allow a client to do the following: Properties props = new Properties(); props.put(javax.naming.SECURITY_PRINCIPLE); props.put(javax.naming.SECUIRTY_CREDENTIALS); Context myCon = new InitialContext(props); Then when they call "lookup" on the BeanHome, I want to do authentication (NOT authorization) at that point. So my handler will create a new SecurityContext with that Principal and put it into the SecurityCurrent. So my question here is, when they call "lookup" on the bean: 1. What method( and class) in the JONAS Container is called? 2. Can I access the client's Context from that? After this, my question is: When they call a bean's method, how do I have it call my security handler instead of just going straight to JBeanHome which calls methodGaurd.checkGaurd? What if I want to do some other stuff as well? How do I get my handler in there? Please, if you can, answer all of my questions (I know there are alot, but they are all necessary). I know that this whole newsgroup will benefit from such knowledge. Thanks, Robert _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com