Browsed thru the source codes.  The interceptor as described in URL:

http://www.jboss.org/wiki/Wiki.jsp?page=XMBeansforSecurity 

only intercept calls to object org.jboss.naming.NamingService

But according to the class diagram in URL 

http://docs.jboss.org/jbossas/admindevel326/html/ch3.chapter.html#ch3.jbossns.fig

JNDI client only interact with object org.jnp.server.NamingServer thru 
interface org.jnp.interfaces.Name, the interceptor will not be called, 
hence the access control still will not in place.

Am I right?



View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3857128#3857128

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3857128


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to