See the security tutorial: http://www.jboss.org/documentation/HTML/ch11s78.html

----- Original Message ----- 
From: "Dale V. Georg" <[EMAIL PROTECTED]>
To: "jBoss mailing List" <[EMAIL PROTECTED]>
Sent: Friday, May 11, 2001 9:10 AM
Subject: [JBoss-user] Question on Security Role Mapping


> 
> In my ejb-jar.xml, I define a number of security roles, for example:
> 
>         <security-role>
>             <description>All users with read access to instance
> 1</description>
>             <role-name>Instance1Reader</role-name>
>         </security-role>
> 
> In other application servers that I have worked with, this role-name is
> a "logical" role name, which in turn must be mapped to a "physical"
> principle in the app server specific xml.  For example, in
> weblogic-ejb-jar.xml, I would specify:
> 
>         <security-role-assignment>
>            <role-name>Instance1Reader</role-name>
>             <principal-name>guest</principal-name>
>         </security-role-assignment>
> 
> However, unless I am missing something, it seems that jboss.xml does not
> provide an equivalent mapping, and that jBoss expects the role-name from
> the ejb-jar.xml file itself to be the actual principle name.  Is this
> correct?
> 
> Thanks,
> Dale
> 



_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to