Head First EJB

MessageDrivenContext

Note

get caller principal() and is callerRole() give you security info about the client. But you don’t HAVE a client.

It’s simple. Message-driven beans don’t have clients. That means they don’t have a client VIEW, so there’s no home interface.

And since there’s no client, there’s no client security information.

So, you can’t call the two methods for getting the home (since you HAVE no home), or the two methods for getting info about the caller’s security.

There are no Dumb Questions

Q:	Q: You keep saying that message-driven beans don’t have clients. But SOMEBODY has to call the bean’s methods, right? They don’t call themselves...
A:	A: Technically, yes, the bean’s methods are called. But we don’t consider the Container to be a client. It’s the boss, not the customer. So, in the Java sense, the Container is the bean’s caller, but not a client. And as for getting security info, if the bean doesn’t trust its own Container, you have waaaay bigger problems. We’re talking one seriously paranoid bean.