I have been trying to get some security around MDB
beans generated with xdoclet and have found that the
ejb-name tag in the method-permissions section of the
ejb-jar.xml is missing for MDB beans.
I'm running JBoss 2.4.3 and xdoclet 1.0.1. My MDB
Bean's header documentation looks like this:
/**
* This is a Message Driven Bean
*
* @ejb:bean name="evil/EvilBean"
* jndi-name="evil/EvilBean"
* type="MDB"
* transaction-type="Container"
* acknowledge-mode="Auto-acknowledge"
* destination-type="javax.jms.Topic"
* subscription-durability="NonDurable"
* @ejb:ejb-ref ejb-name="evil/EvilWorker"
* @ejb:security run-as="admin"
* @ejb:permission role-name="user"
* @jboss:destination-jndi-name "topic/evilTopic"
**/
The ejb-jar.xml file generated contains the following
stub for the MDB's method-permissions:
<method-permission>
<role-name>user</role-name>
<method>
<method-name>*</method-name>
</method>
</method-permission>
(I removed the unsupported descriptions to conserve
space.)
Notice the <ejb-name>evil/EvilBean</ejb-name> is
missing.
Is this a problem with my usage, or with the
generation?
Thanks.
-Neal