JAAS and EJB

[Kumar Amit]

Hi

As per Mark Cade's study guide behaviour of EJB methods vary according to the role of the user. How should this be achieved?
Answer: Business methods determines the role of the user using JAAS and confiuration information in the deployment descriptor

Is this correct?

Can anyone give me example of how to use JAAS in this case

Thanks

Amit

[Yegor Bugayenko]

Something like this:

EJBContext ctx = ...
if (ctx.isCallerInRole("admin")) {
  // ...
}

You need to read more about "programmatic JAAS" (try to google it).