Hi Les.
Thanks again for your excellent explanations.
> I guess if EJB limits you like that, then you'd have to jump through
> some hoops (but it is still possible - see below). And while EJB may
> not allow this, I'd be shocked if there isn't a container-specific way
> of supporting this (I think JBoss Remoting can support this if you're
> using JBoss for example).
Yeah - I was a bit surprised as well. But it seems when it comes to
remote calls,
there is a lot of flexibility missing. I've read about client
interceptors in JBoss,
but our AS of choice is glassfish.
While your suggested solution seems doable, I am not sure we will go with it.
Need to play around with some code, but in the end it could be easier
to just implement
a custom jaas realm in combination with some home-grown AuthService.
Thanks again.
-ps
