Change Notes item #435361, was updated on 2001-06-22 00:24 You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=381174&aid=435361&group_id=22866 Category: None Group: v2.4 Status: Open Priority: 5 Submitted By: Scott M Stark (starksm) Assigned to: Scott M Stark (starksm) Summary: Security Changes Initial Comment: Added support for the EJB2.0 ejb-jar/assembly- descriptor/method-permission/unchecked element that allows a method to be declared as accessible by all. Added support for the EJB2.0 ejb-jar/assembly- descriptor/exclude-list element that allows a method to be declared as accessible to no one. Added an unauthenticated-principal element to allow for the specification of the principal that should be returned by the EJBContext.getCallerPrincipal() method. This principal has no assigned roles. Added support for a jboss/container- configurations/container-configuration/security-domain element that allows for the security manager name. This should be used in place of the role-mapping-manager and authentication-module elements. You can no longer supply independent role mapping and authentication functions. The custom security proxy interceptor has been broken out into a SecurityProxyInterceptor that is only added to a container if the configuration has requested a custom security proxy. The interceptor is inserted before the container interceptor so that the EJBContext and bean instance are available to the custom security proxy. ---------------------------------------------------------------------- You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=381174&aid=435361&group_id=22866 _______________________________________________ Jboss-development mailing list [EMAIL PROTECTED] http://lists.sourceforge.net/lists/listinfo/jboss-development