--- Jeremy Cowgar <[EMAIL PROTECTED]> wrote:
> I know that I can set the default permission for
> methods by adding 
> @ejb.permission role-name="user" but when I then
> want to over-ride one 
> method, I add @ejb.permission role-name="superuser"
> to that method tag.
> 
> This does not seem to work. A user with the role
> "user" can run my 
> method I marked for "superuser". Am I doing
> something wrong, or is this 
> not possible?

Setting permission on class level forces xdoclet to
generate following entry: 

      <method-permission >
         <description><![CDATA[description not
supported yet by ejbdoclet]]></description>
         <role-name>admin</role-name>
         <role-name>data</role-name>
         <method >
            <description><![CDATA[description not
supported yet by ejbdoclet]]></description>
            <ejb-name>Rider</ejb-name>
            <method-name>*</method-name>
         </method>
      </method-permission>

And of course such permission matches every method 
in your EJB.  Setting permission on method
creates yet another entry, but just for specified
method - and does not invalidate globbed permission. 

regards,


=====
Konstantin Priblouda ( ko5tik )    Freelance Software developer
< http://www.pribluda.de > < play java games -> http://www.yook.de >
< render charts online -> http://www.pribluda.de/povray/ >

__________________________________________________
Do you Yahoo!?
HotJobs - Search new jobs daily now
http://hotjobs.yahoo.com/


-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm 
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
Xdoclet-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/xdoclet-user

Reply via email to