Re: [jBoss-User] enhancing the EJB model

[Rickard �berg]

Hi!

Scott M Stark wrote:
> > The spec already allows this doesn't it ? Check isCallerRole() and
> > getCallerPrincipal().
> >
> 
> This functionallity is not adequate in general. Checking the caller role or 
>principal does
> not allow for validation of a permission check that is a function of the object being
> accessed. For example, a document repository can have a folder for architectural
> blueprints that only users with the role Architect can write to. This permission is
> attached to a specific path or object, not the bean class.

How do you mean? The entity instance when called could do
isCallerInRole("Architect")?

/Rickard

-- 
Rickard �berg

Email: [EMAIL PROTECTED]


--
--------------------------------------------------------------
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]
Problems?:           [EMAIL PROTECTED]