Menu

#64 MDB Beans Omit Method Perms ejb-name tag

open
nobody
Doclet (16)
5
2001-10-30
2001-10-30
Anonymous
No

I have been trying to get some security around MDB
beans generated with xdoclet and have found that the
ejb-name tag in the method-permissions section of the
ejb-jar.xml is missing for MDB beans.

I'm running JBoss 2.4.3 and xdoclet 1.0.1. My MDB
Bean's header documentation looks like this:

/**
* This is a Message Driven Bean
*
* @ejb:bean name="evil/EvilBean"
* jndi-name="evil/EvilBean"
* type="MDB"
* transaction-type="Container"
* acknowledge-mode="Auto-acknowledge"
* destination-type="javax.jms.Topic"
* subscription-durability="NonDurable"
* @ejb:ejb-ref ejb-name="evil/EvilWorker"
* @ejb:security run-as="admin"
* @ejb:permission role-name="user"
* @jboss:destination-jndi-name "topic/evilTopic"
**/

The ejb-jar.xml file generated contains the following
stub for the MDB's method-permissions:

<method-permission>
<role-name>user</role-name>
<method>
<method-name>*</method-name>
</method>
</method-permission>

(I removed the unsupported descriptions to conserve
space.)

Notice the <ejb-name>evil/EvilBean</ejb-name> is
missing.

Is this a problem with my usage, or with the
generation?

Thanks.

-Neal

Discussion


Log in to post a comment.