Message:

   The following issue has been re-assigned.

   Assignee: Matthias Germann (mailto:[EMAIL PROTECTED])
---------------------------------------------------------------------
View the issue:
  http://opensource.atlassian.com/projects/xdoclet/browse/XDT-658

Here is an overview of the issue:
---------------------------------------------------------------------
        Key: XDT-658
    Summary: method-permissions not explicitly scopable
       Type: Bug

     Status: Open
   Priority: Major

 Original Estimate: Unknown
 Time Spent: Unknown
  Remaining: Unknown

    Project: XDoclet
 Components: 
             EJB Module
   Versions:
             1.2 Beta 3

   Assignee: Matthias Germann
   Reporter: Johnathan Conley

    Created: Wed, 1 Oct 2003 11:27 AM
    Updated: Sat, 5 Feb 2005 4:00 PM

Description:
The EJB spec allows for <method-itf> to be specific to Remote,Local and hence 
have >1 association per method-permission for the same method-name/signature.
For example, each method could have different permissions for each interface 
type. So we could assign permission A to the Remote, and permission B to the 
Local.

In the XDoclet implementation, it appears this value is inhereted from the 
@interface-method/etc to auto-populate. As such, the @ejb.interface tag is only 
allow at most once per method.

Specifically for our system, we apply no security roles to any Locally exposed 
methods, but many methods that are exposed both Remote and Local have a 
permission set only on the Remote.

The only feasible workaround in our case would be to do a global find/replace 
on all generated ejb-jar.xml files and reset the <method-intf> values to that 
which is expected, since none of our Local's have permissions.

Please advise if we have missed something and this is possible.



---------------------------------------------------------------------
JIRA INFORMATION:
This message is automatically generated by JIRA.

If you think it was sent incorrectly contact one of the administrators:
   http://opensource.atlassian.com/projects/xdoclet/secure/Administrators.jspa

If you want more information on JIRA, or have a bug to report see:
   http://www.atlassian.com/software/jira



-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
xdoclet-devel mailing list
xdoclet-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xdoclet-devel

Reply via email to