Hi ,

I had thought that i wld assign users to Group in the weblogic properties ..and in my XML Deployment Descriptor i wld just say that this Group can access the specified methods ..But it doesnt work that way ..In my DD (weblogic-ejb-jar) i need to specify what all users are there in that Group. like

- <security-role-assignment>
  <role-name>Managers</role-name>
  <principal-name>Rinku</principal-name>
  </security-role-assignment>
- <security-role-assignment>
  <role-name>Software</role-name>
  <principal-name>Sri</principal-name>
  </security-role-assignment>



.SO the question is if tommorow there is a user who has to be added to the Group i need to modify the DD, jar it ,ejbc it and redeploy with is highly illogical...The bottom line is it deosnt pick up the entry from he weblogic properties..If i comment my groups in weblogic properties and keep it in DD it works fine but it doesnt work vice-verca..Any comments wld be appreciated

Thanks in advance
Rinku

Hi Rinku,
You can consider using Realms for ur security problem. With that you can dynamically keep changing the list of ur users and their groups. And further you could also use LDAP or a database realm. Hope that gives you some hints to approach ur problem.
Cheers
Pankaj

In WebLogic, EJB roles map to WL groups.