01: /**
02: * EasyBeans
03: * Copyright (C) 2006 Bull S.A.S.
04: * Contact: easybeans@ow2.org
05: *
06: * This library is free software; you can redistribute it and/or
07: * modify it under the terms of the GNU Lesser General Public
08: * License as published by the Free Software Foundation; either
09: * version 2.1 of the License, or any later version.
10: *
11: * This library is distributed in the hope that it will be useful,
12: * but WITHOUT ANY WARRANTY; without even the implied warranty of
13: * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14: * Lesser General Public License for more details.
15: *
16: * You should have received a copy of the GNU Lesser General Public
17: * License along with this library; if not, write to the Free Software
18: * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
19: * USA
20: *
21: * --------------------------------------------------------------------------
22: * $Id: StatelessRunAsBean.java 1970 2007-10-16 11:49:25Z benoitf $
23: * --------------------------------------------------------------------------
24: */package org.ow2.easybeans.examples.security;
25:
26: import javax.annotation.Resource;
27: import javax.annotation.security.DeclareRoles;
28: import javax.annotation.security.RunAs;
29: import javax.ejb.EJB;
30: import javax.ejb.Remote;
31: import javax.ejb.SessionContext;
32: import javax.ejb.Stateless;
33:
34: /**
35: * Stateless Bean with secured methods.
36: * Two roles are declared : user and admin.
37: * @author Florent Benoit
38: */
39: @Stateless
40: @Remote(StatelessRunAsRemote.class)
41: @DeclareRoles({"admin"})
42: @RunAs("admin")
43: public class StatelessRunAsBean implements StatelessRunAsRemote {
44:
45: /**
46: * SessionContext used to get current caller.
47: */
48: @Resource
49: private SessionContext sessionContext;
50:
51: /**
52: * Link to bean.
53: */
54: @EJB
55: private StatelessRemote other;
56:
57: /**
58: * Prints the current caller.
59: */
60: public void printCurrentCaller() {
61: System.out.println("Caller is '"
62: + sessionContext.getCallerPrincipal());
63: }
64:
65: /**
66: * Call method that is allowed only for admin. (but use run-as role).
67: */
68: public void callBeanWithRunAsAdmin() {
69: other.onlyAdminAllowed();
70:
71: // Also call a method that permit two roles
72: other.someRolesAllowed();
73:
74: }
75:
76: }
|