Hi, we're trying to build a security model for our J2EE application. I'm studying that, once a client has been associated with a Principal object, any call to any method in the Remote Interface results in an implicit propagation on the Principal object to the EJB Server. Few questions:

1) Once a client is associated with a Principal, is it true that it's enough to call the getCallerPrincipal() method on the Context object in order to have the principal object?

2) If we declare security-roles in the deployment descriptor, will the container intercept each monitored call against the Principal object implicitly propagated with the caller?

Thanks for any help,

Marco

Marco Tedone
Jemos Founder

Hi

Did you find the answer to the question posted?

Appreciate if you can email me the same as well..