|
| |
|
| java.lang.Object
 org.jboss.ejb.plugins.AbstractInterceptor
org.jboss.ejb.plugins.SecurityInterceptor
| SecurityInterceptor | | public class SecurityInterceptor extends AbstractInterceptor (Code) | | The SecurityInterceptor is where the EJB 2.0 declarative security model
is enforced. This is where the caller identity propagation is controlled as well.
author:
Oleg Nitz
author:
Scott Stark.
author:
Thomas Diesler.
version:
$Revision: 60859 $ |
| Inner Class :public interface AuthenticationObserver | |
| authenticationObserver | | protected AuthenticationObserver authenticationObserver(Code) | | |
| realmMapping | | protected RealmMapping realmMapping(Code) | | The authorization manager plugin
|
| runAsIdentity | | protected RunAsIdentity runAsIdentity(Code) | | |
| securityManager | | protected AuthenticationManager securityManager(Code) | | The authentication manager plugin
|
| securityRoles | | protected Map securityRoles(Code) | | |
| checkSecurityAssociation | | protected void checkSecurityAssociation(Invocation mi) throws Exception(Code) | | The EJB 2.0 declarative security algorithm:
1. Authenticate the caller using the principal and credentials in the MethodInfocation
2. Validate access to the method by checking the principal's roles against
those required to access the method.
|
| setContainer | | public void setContainer(Container container)(Code) | | Called by the super class to set the container to which this interceptor
belongs. We obtain the security manager and runAs identity to use here.
|
|
|
|