kamalsurana@1... wrote:

Try to see Xml file generated by Deployment descriptors for more Informat
ion
On The permission on Methods. Probably you get the solution. 


 

Hi Naveen

I have provided permission for create() method to only 1 user but all the
 

users are able to access it. What could be the reason?

> Hey Kamal
> 

> 

> By default there is no restrictions on calling thew methods unless you 

sp=3D
> ecify
> in  Deployment descriptors so you must specify permissions for differen
t 

=3D
> users
> of different Roles.
> 

> 

> 

> 

> kamalsurana@1... wrote:
> I gave method level permissions for different users. It is working fine
 =3D
> 

> for methods defined in remote interface but in case of methods of home 
=3D
> 

> interface(create and findByPrimaryKey) , it is allowing everybody acces
s 

=3D
> 

> even if has no permission for that method.
> 

> Also methods for which no permission is set is getting accessed by all,
 =3D
> 

> which shouldn't be the case.
> 

> What could be reason. Please help.....
> 

> Kamal
>