Hi Naveen

I have provided permission for create() method to only 1 user but all the 
users are able to access it. What could be the reason?

> Hey Kamal
> 
> 
> By default there is no restrictions on calling thew methods unless you 
sp
> ecify
> in  Deployment descriptors so you must specify permissions for different 

> users
> of different Roles.
> 
> 
> 
> 
> kamalsurana@1... wrote:
> I gave method level permissions for different users. It is working fine 
> 
> for methods defined in remote interface but in case of methods of home 
> 
> interface(create and findByPrimaryKey) , it is allowing everybody access 

> 
> even if has no permission for that method.
> 
> Also methods for which no permission is set is getting accessed by all, 
> 
> which shouldn't be the case.
> 
> What could be reason. Please help.....
> 
> Kamal
>