Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@geronimo.apache.org
Received-SPF: pass (athena.apache.org: domain of c1vamsi1c@gmail.com
 designates 209.85.146.181 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:to:subject:mime-version:content-type;
        b=rOis4k2u2dp6b8Cvai3wCtJijnCAj0bJVXodyIZYZPp5qUbnnqfpRALmkKqX4jgiPWxrI2IQTCKAOFm9WPEPSLMynjhFp6gz0Jnmc0P+LxLIXDySQ+6iAY9N4Jq2zNUZkp309lQ0c+gbSzR8D0gyqEDWhQZA+sPeX59nxWAO7Po=
Message-ID: <22d56c4d0710161146l8d7b59fu5406ec5589ab52e3@mail.gmail.com>
Date: Wed, 17 Oct 2007 00:16:17 +0530
From: "Vamsavardhana Reddy" <c1vamsi1c@gmail.com>
To: "Geronimo Dev" <dev@geronimo.apache.org>
Subject: An ejb security question
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_32592_13981759.1192560377415"

------=_Part_32592_13981759.1192560377415
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Can someone help me with an ejb security question? I have an EJB with three
methods, m1 with unrestricted access, m2 accessible by guest role and m3
accessible by guest and admin roles. I am accessing all these three methods
from three different jsps and displaying whether the access is successful or
not. The first jsp index.jsp does not need any authentication and is able to
access m1 only. The second jsp guest.jsp needs authentication for guest role
and is able to access all three methods. Once logged in as guest, I expect
the index.jsp also to be able access all three methods. But index.jsp is
able to access m1 only though request.getUserPrincipal().getName() shows the
logged in username.  Is this the correct behavior or there is something
wrong? I am using G 2.0.1.

++Vamsi

------=_Part_32592_13981759.1192560377415
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Can someone help me with an ejb security question? I have an EJB with three methods, m1 with unrestricted access, m2 accessible by guest role and m3 accessible by guest and admin roles. I am accessing all these three methods from three different jsps and displaying whether the access is successful or not. The first jsp 
index.jsp does not need any authentication and is able to access m1 only. The second jsp guest.jsp needs authentication for guest role and is able to access all three methods. Once logged in as guest, I expect the index.jsp
 also to be able access all three methods. But index.jsp is able to access m1 only though request.getUserPrincipal().getName() shows the logged in username.&nbsp; Is this the correct behavior or there is something wrong? I am using G 
2.0.1.<br><br>++Vamsi<br>

------=_Part_32592_13981759.1192560377415--