1 2 Previous Next 17 Replies Latest reply: Jan 30, 2012 1:09 AM by Stephen Coy RSS

@RolesAllowed, @DenyAll require presence of org.jboss.ejb3.annotation.SecurityDomain?

Stephen Coy Master

Hi there,

 

I've been developing some Arquillian tests that test some code that use @RolesAllowed, @DenyAll  annotations and friends.

 

It seems that these annotations only work if the class is also annotated with @org.jboss.ejb3.annotation.SecurityDomain.

 

EJBContext.isCallerInRole(java.lang.String) and EJBContext.getCallerPrincipal() seem to work just fine without this.

 

Is that the expected behaviour?

 

This is for a planned Arquillian article on testing secured components.

 

Thanks

1 2 Previous Next