AccessControlEntry and ControlDescriptor default in a Deployment Descriptor

Hi all,

env Oracle 8i v8.1.5, NT, JDK 1.1.7

Let's suppose I have an EJB with three methods exposed on its home interface, A() B() and C(), and let's suppose I'd like 1) to allow all user to call A() and B() and only SCOTT to call C() 2) B() and C() RunAsMode SYSTEM_IDENTITY

is the following DD right or must I specify a ControlDescriptor (RunAsMode + RunAsIdentity) for the A() method who uses standard settings?

SessionBean helloServer.HelloBean
{
  BeanHomeName = "test/myHello";
  RemoteInterfaceClassName = hello.Hello;   HomeInterfaceClassName = hello.HelloHome;

  AllowedIdentities = { PUBLIC };
  RunAsMode = CLIENT_IDENTITY;

 public void B() {
  RunAsMode = SYSTEM_IDENTITY;
}

 public void C() {
  RunAsMode = SYSTEM_IDENTITY;
  AllowedIdentities = { SCOTT};
}

}

TIA
Alberto Received on Mon Jun 28 1999 - 03:29:53 CDT