Hi
I have an EJB published as a web service on Apache SOAP 2.2 running on orion
server. I wish to avail some methods of this EJB to a particular group and
other methods to another group defined for the application server. i.e. the
teller group of users can open/close a bank account, but a customer user
cant. These things are configured with the method-permission tag in the
ejb-jar.xml file for the EJBs. They all work fine when i access these
methods from a Java client using RMI. Problems arise for SOAP communication.
When i connect to SOAP, i do not ( rather i dont know how to ) provide any
user name and password and the rpcrouter servlet appears to take the user
accessing the web service to be a guest.
How do i make the rpc router and in turn the EJB exposed as a web service
understand the user name and inturn the role of the user trying to access
the methods,
UR help would be greatly appreciated
TIA
Yash
