I've seen this before as well. I *think* that I fixed it by putting the following xdoclet tag up in my class-level area:
@ejb:permission unchecked=""

This adds an <unchecked/> tag into ejb-jar.xml for the methods that don't have security permissions specified. Then I override the permissions for each method that I want secured with specific roles.

Hope that helps,
gary.


Jon Haugsand wrote:

Can't see what I do wrong here, I get [SecurityInterceptor] No method
permissions assigned to method=create, interface=HOME. But isn't the
following good enough?

<method-permission >
<description>description not supported yet by ejbdoclet</description>
<role-name>silbrukere</role-name>
<role-name>siladministratorer</role-name>
<method >
<description>description not supported yet by ejbdoclet</description>
<ejb-name>SynkronGrensesnitt</ejb-name>
<method-name>*</method-name>
</method>
</method-permission>

Cannot find I do anything different from what we did on the JBoss
advanced training (well, maybe we used cmp 1.1 then). So where shall
I look to find the error?

I run jboss-3.0.2_tomcat-4.0.4. Full stacktrace from server follows:

12:32:25,539 ERROR [SecurityInterceptor] No method permissions assigned to method=create, interface=HOME
12:32:25,543 ERROR [LogInterceptor] EJBException, causedBy:
java.lang.SecurityException: No method permissions assigned to method=create, interface=HOME
at org.jboss.ejb.plugins.SecurityInterceptor.checkSecurityAssociation(SecurityInterceptor.java:190)
at org.jboss.ejb.plugins.SecurityInterceptor.invokeHome(SecurityInterceptor.java:94)
at org.jboss.ejb.plugins.LogInterceptor.invokeHome(LogInterceptor.java:129)
at org.jboss.ejb.StatelessSessionContainer.invokeHome(StatelessSessionContainer.java:300)
at org.jboss.ejb.Container.invoke(Container.java:738)
at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:517)
at org.jboss.invocation.jrmp.server.JRMPInvoker.invoke(JRMPInvoker.java:370)
at java.lang.reflect.Method.invoke(Native Method)
at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:236)
at sun.rmi.transport.Transport$1.run(Transport.java:147)
at java.security.AccessController.doPrivileged(Native Method)
at sun.rmi.transport.Transport.serviceCall(Transport.java:143)
at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:460)
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:701)
at java.lang.Thread.run(Thread.java:479)




-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to