org.jboss.test.security.ejb
Class SubjectSessionBean

java.lang.Object
  org.jboss.test.security.ejb.SubjectSessionBean

All Implemented Interfaces:

EnterpriseBean (src) , java.io.Serializable, SessionBean (src)

public class SubjectSessionBean

extends java.lang.Object

implements SessionBean (src)

A session facade that tests that the security context reflected by the SecurityAssociation.getSubject and PolicyContext. This will not run under the security manager tests as ejbs are not granted access to these security apis.

See Also:

Serialized Form

SubjectSessionBean

public SubjectSessionBean()

ejbCreate

public void ejbCreate()

ejbActivate

public void ejbActivate()

Description copied from interface: SessionBean (src)

The activate method is called when the instance is activated from its "passive" state. The instance should acquire any resource that it has released earlier in the ejbPassivate() method.

This method is called with no transaction context.

Specified by:

ejbActivate in interface SessionBean (src)

ejbPassivate

public void ejbPassivate()

Description copied from interface: SessionBean (src)

The passivate method is called before the instance enters the "passive" state. The instance should release any resources that it can re-acquire later in the ejbActivate() method.

After the passivate method completes, the instance must be in a state that allows the container to use the Java Serialization protocol to externalize and store away the instance's state.

This method is called with no transaction context.

Specified by:

ejbPassivate in interface SessionBean (src)

ejbRemove

public void ejbRemove()

Description copied from interface: SessionBean (src)

A container invokes this method before it ends the life of the session object. This happens as a result of a client's invoking a remove operation, or when a container decides to terminate the session object after a timeout.

This method is called with no transaction context.

Specified by:

ejbRemove in interface SessionBean (src)

setSessionContext

public void setSessionContext(SessionContext (src)  context)

Description copied from interface: SessionBean (src)

Set the associated session context. The container calls this method after the instance creation.

The enterprise Bean instance should store the reference to the context object in an instance variable.

This method is called with no transaction context.

Specified by:

setSessionContext in interface SessionBean (src)

Parameters:

context - - A SessionContext interface for the instance.

validateCallerContext

public void validateCallerContext(java.lang.String callerName,
                                  java.util.Set callerPrincipals)
                           throws java.security.GeneralSecurityException

Parameters:

callerName -

callerPrincipals -

Throws:

java.security.GeneralSecurityException

validatePolicyContextSubject

protected void validatePolicyContextSubject(java.lang.String ctx,
                                            java.util.Set callerPrincipals)
                                     throws java.security.GeneralSecurityException

Get the active subject as seen by the JACC policy context handler.

Throws:

java.security.GeneralSecurityException

validateSecurityAssociationSubject

protected void validateSecurityAssociationSubject(java.lang.String ctx,
                                                  java.util.Set callerPrincipals)
                                           throws java.security.GeneralSecurityException

Get the active subject as seen by the jboss SecurityAssociation

Throws:

java.security.GeneralSecurityException

contains

protected boolean contains(javax.security.auth.Subject s,
                           java.util.Set callerPrincipals)