WebSphere Application Server - Run-As role in a servlet

Author

Run-As role in a servlet

jaegerp

2004-03-25, 4:39 pm

I am trying to access an EJB protected by a security role. If I restrict the access to the EJB to a specific user or a group, it works fine. However, I want to have an unauthenticated servlet access the EJB by using the run-as role setting in the deploy
ment descriptor. I have checked the J2EE spec, and the run-as setting should do exactly what I want it to do. However, every time I invoke the servlet, the run-as role is never applied to the security identity that calls the EJB. As a result, authoriza
tion on the EJB always fails.

I am using WSAD 5.1 on Windows with the WAS 5.02 test environment. Does anyone know how to get the servlet to run as a specific identity?