on 10-08-2006 1:58 PM
Hi,
I have one question about accessing JNDI. I have created some objects in JNDI registry. (EJB's + Datasource + JMS objects)
Now i want to get access to these objects from external client (application running on another j2ee app. server). I can lookup ANY JNDI object from remote client with administrator account; but i would like to know how to get permission for external client to lookup only for selected objects.
Thanks for answer.
Best Regards,
Michal Petrik
Hello Michal,
The current implementation of engine's jndi service does not support security constraints per binding. Permissions are applied per operation, i.e. if a certain user has permission to perform lookup operation they are able to lookup any object in a certain namespace.
But the lookup of an object by some user is not itself an issue if this user is not authorized to call the methods of this object. In this direction you can configure specific permissions for the looked up object's methods invocation.
Kind Regards,
Elitsa
Message was edited by: Elitsa Pancheva
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
94 | |
11 | |
10 | |
9 | |
9 | |
7 | |
6 | |
5 | |
4 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.