|
From: Ben A. <ben...@ac...> - 2005-05-09 21:48:57
|
James Cook wrote: >a) POJO-based approaches (AFAIK) with the exception of EJB3, do not >support distributed security contexts. > Not true! :-) Acegi Security System for Spring will happily and transparently move your SecurityContext from one machine to another when used with the RMI or HttpInvoker remoting protocols. It also offers an EJB equivalent run-as replacement capability if the remote bean operates in a different security realm (ie needs different credentials) than the caller's security realm. > Even if you were writing an EJB >implementation, you would want to limit the number of network calls >your app has to make. > > Very true about the desire to limit network calls. Cheers Ben |