File	Doc	Category	Size	Date	Package
SecurityManager.java	API Doc	Glassfish v2 API	4314	Fri May 04 22:33:16 BST 2007	com.sun.enterprise

SecurityManager

Fields Summary

Constructors Summary

Methods Summary
public boolean	authorize(Invocation inv) param The Invocation object containing the details of the invocation. return true if the client is allowed to invoke the EJB, false otherwise.
public void	destroy() Call this method to clean up all the bookeeping data-structures in the SM.
public java.lang.Object	doAsPrivileged(java.security.PrivilegedExceptionAction pea)
public java.security.Principal	getCallerPrincipal() return The Principal of the client who made the current invocation.
public javax.security.auth.Subject	getCurrentSubject() This will return the subject associated with the current call. If the run as subject is in effect. It will return that subject. This is done to support the JACC specification which says if the runas principal is in effect, that principal should be used for making a component call. return Subject the current subject. Null if this is not the runas case
public boolean	isCallerInRole(java.lang.String role) return A boolean true/false depending on whether or not the caller has the specified role. param The EJB developer specified "logical role".
public void	postInvoke(ComponentInvocation inv) This method is used by the Invocation Manager to remove the run-as identity information that was set up using the preInvoke param ComponentInvocation
public void	preInvoke(ComponentInvocation inv) This sets up the security context - if not set and does run-as related login if required param ComponentInvocation