[jBoss-User] Security: Unauthorized clients access beans

2001-01-17 Thread Alexander Klyubin
Hi! I fairly new to JAAS and jBoss implementation of EJB security. I managed to configure jBoss so that it check access to beans based on roles -- the standard way. It works fine, until I try to use the beans by clients, which never logged in (did not use any LoginContext). They are allowed

Re: [jBoss-User] Security: Unauthorized clients access beans

2001-01-17 Thread Oleg Nitz
Hi Alexander, Which JBoss version do you use? I guess, 2.0. I cannot tell you "why is this", :-) but I believe that in CVS (version PRE-2.1) this flaw has been fixed. Regards, Oleg Alexander Klyubin wrote: I fairly new to JAAS and jBoss implementation of EJB security. I managed to configure

Re: [jBoss-User] Security: Unauthorized clients access beans

2001-01-17 Thread dferugson
Where can I find info on using the LoginContext. I haven't seen any docu. If there isn't does anybody out there have code examples they could share? thanks. d. Oleg Nitz wrote: Hi Alexander, Which JBoss version do you use? I guess, 2.0. I cannot tell you "why is this", :-) but I believe

RE: [jBoss-User] Security: Unauthorized clients access beans

2001-01-17 Thread Alexander Klyubin
18:09 To: jBoss Subject: Re: [jBoss-User] Security: Unauthorized clients access beans Where can I find info on using the LoginContext. I haven't seen any docu. If there isn't does anybody out there have code examples they could share? thanks. d