Hi, I am trying to apply security on an inbound message using the actor/role attribute. My use case calls for the ability to dynamically set which security header to process. I know you can set an "actor" property to the outbound message context and it will create a wsse header with corresponding actor/role attribute but I was unable to find corresponding setting for the inbound messages. Looking at org.apache.rampart.handler.WSDoAllReceiver.java I see that the actor is extracted from the handler parameters or the module paramters:
149 String actor = (String) getOption(WSHandlerConstants.ACTOR); Is there any way (that I am missing) to force the receiver to look in the message context for WSHandlerConstants.ACTOR if it fails to find it in the handler and module configuration? George
