By deployment descriptor I assume you mean the ejb-jar.xml?
The basic answer is to use roles in your DD, not users. Set up the
security-roles you expect to need for your app using the DD, and assign
method-permissions to the roles as needed (the method permissions can be very
specific or very generic, it's up to you). You would never add a user or
password to the DD. You'd just keep users and passwords in the database,
probably using a role of "admin" or something when you wanted to add or remove a
user from the table of users/passwds. All in all, this keeps the user
administration out of your EJBs and allows it to be dynamic.
Does this help?
Scott Stirling
Allaire
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, September 27, 2000 12:24 AM
> To: JRun-Talk
> Subject: RE: anybody working on JRUN3.0 for EJB1.1
>
>
>
> Hi Scott,
>
> I have successfully deployed EJB and calling from jsp in JRUN3.0. In
> Deployment descripter i have user user name and role in which usr_id and
> password is written for authentication. Also i am verifying this from
> database.
> Now my problem is when ever i will add a new user i have to write user_name
> and password in deployment descripter. Till this is in development phase
> things will work. But when this goes to product phase and i add new user
> from application(jsp) in database.User can not access ejb because he is not
> defined in DD. At running time i can not redeploy and restrat also. Then
> what to do.
>
> Thanks.In advance.
> regards,
>
> Uday Kumar Bhatt
> System Engineer
> Acefusion.Com
> 750 A TechnoPark Chai Chee
> Singapore.
------------------------------------------------------------------------------
Archives: http://www.egroups.com/group/jrun-interest/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/jrun_talk
or send a message to [EMAIL PROTECTED] with 'unsubscribe' in the
body.
