>
> 2- The security, do we associate the Principal to the ctx somewhere else? I
> don't believe we should associate to the ctx (see warning in source, I also
> need to update these). Scott do you take care of associating the ctx to the
> principal somewhere else?
>
The prinicpal identity and credentials is taken from the MethodInfocation
object and if validated, set as a property of the invocation thread using
the SecurityAssociation class. In the JAAS version there is also a thread
local Subject established.
_______________________________________________
Jboss-development mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-development
