5.5. Delegation policy

When an EJB calls a method in another EJB, the identity of the caller of the first EJB is, by default, propagated to the next. In this way, all EJB methods in the calling chain would see the same principal if they were to call getCallerPrincipal(). Occasionally, however, it is desirable for one EJB to call another with a previously defined identity, for instance one that is a member of a specific role.

One example is the case of a message-driven bean’s onMessage() method which calls a protected method in an entity bean. Since ...

Get IBM WebSphere V5.0 Security: WebSphere Handbook Series now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.