Bugs item #768710, was opened at 2003-07-09 13:37
Message generated for change (Comment added) made by starksm
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=376685&aid=768710&group_id=22866

Category: JBossSX
Group: v3.2
>Status: Closed
>Resolution: Works For Me
Priority: 5
Submitted By: thomas diesler (tdiesler)
>Assigned to: Scott M Stark (starksm)
Summary: order of method-permission in ejb-jar.xml

Initial Comment:
If I declare the methods with role-name before the


unchecked methods, method permissions get assigned.




If I declare the unchecked methods first, I get


No method permissions assigned to 
method=createWithRoles, interface=REMOTE




I think the order should not matter, or?




cheers


-tomsk




<method-permission >


  <role-name>Admin Role</role-name>


  <method >


    <ejb-name>UserFacade</ejb-name>


    <method-intf>Remote</method-intf>


    <method-name>createWithRoles</method-name>


  </method>


</method-permission>




<method-permission >


  <unchecked/>


  ...


<method-permission >








----------------------------------------------------------------------

>Comment By: Scott M Stark (starksm)
Date: 2003-07-16 09:50

Message:
Logged In: YES 
user_id=175228

This works fine for me. See the
org.jboss.test.security.test.EJBSpecUnitTestCase which
includes an ejb deployment with the role based permissions
first followed by the unchecked permission, and well as a
deployment with the opposite ordering. Reopen with a sample
ejb jar if you still see a problem.

      <!-- Define remote interface methods before the
unchecked methods -->
      <method-permission>
         <role-name>Echo</role-name>
         <method>
            <ejb-name>UncheckedSessionRemoteFirst</ejb-name>
            <method-intf>Remote</method-intf>
            <method-name>echo</method-name>
         </method>
      </method-permission>
      <method-permission>
         <role-name>InternalRole</role-name>
         <method>
            <ejb-name>UncheckedSessionRemoteFirst</ejb-name>
            <method-intf>Remote</method-intf>
            <method-name>excluded</method-name>
         </method>
      </method-permission>
      <method-permission>
         <unchecked/>
         <method>
            <ejb-name>UncheckedSessionRemoteFirst</ejb-name>
            <method-name>*</method-name>
         </method>
      </method-permission>

      <!-- Define unchecked methods before the remote
interface methods -->
      <method-permission>
         <unchecked/>
         <method>
            <ejb-name>UncheckedSessionRemoteLast</ejb-name>
            <method-name>*</method-name>
         </method>
      </method-permission>
      <method-permission>
         <role-name>Echo</role-name>
         <method>
            <ejb-name>UncheckedSessionRemoteLast</ejb-name>
            <method-intf>Remote</method-intf>
            <method-name>echo</method-name>
         </method>
      </method-permission>
      <method-permission>
         <role-name>InternalRole</role-name>
         <method>
            <ejb-name>UncheckedSessionRemoteLast</ejb-name>
            <method-intf>Remote</method-intf>
            <method-name>excluded</method-name>
         </method>
      </method-permission>


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=376685&aid=768710&group_id=22866


-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the
same time. Free trial click here: http://www.vmware.com/wl/offer/345/0
_______________________________________________
JBoss-Development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to