securityejbjacc

EJB security custom JACC provider

our project has a very detailed authorization pattern

so i had to implement my own JACC provider.

now i have a problem with EJB security.

i have an EJB method and i want to limit access to it based

on its argument values

for example consider the delete(String arg1) EJB method

i want a user be able to run it with arg1=='something'

and be not able to run it otherwise

how could i access to method's argument values?

thanks

Solution

  • Have you taken a look at EJB interceptors? They have full access to the method's parameters and return value, and can decide to let the call pass through or block it.