Re: Security problem with javax.ejb.Handle

[Harish Prabandham]

Hi,

>
> This also implies that the JAAS must be used -- or some similar container
> specific mechanism -- OR that the EJB object has been deployed to accept
> anonymous clients.  If none of this is true, executing methods on
> the EJBObject
> or even obtaining the EJB object reference from the handle should fail.
>

It does not matter whether the failure occurrs while getting the object
reference from the handle or when the client makes a method call. Does it?


Harish Prabandham
J2EE Reference Implementation
JavaSoftware Division
Sun Microsystems

===========================================================================
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff EJB-INTEREST".  For general help, send email to
[EMAIL PROTECTED] and include in the body of the message "help".