Final words of ACL!

[minjiang]

Hi:
Working on the ACL for several days on WLS 5.1 sp8, sp9, WLS 6 sp2,
i finally got some points here to share.
First, these three versions have all three different ACL
implementations. Our application runs differently on all these three
WLS.
Second, the bean home caching pattern cannot be used any more, if
ACL is used to protect the EJBs.
Third, the initial context cannot be closed right after the homes
are look up, and this ONLY occurs in 5.1 sp9. I suppose this is a bug.
(try one facade session bean calling entity bean in another ACL)
Last, to make acl work, the safest way is to new intial context and
look up homes in EACH method of EACH session bean/servlet/jsp. This is
really ugly!

Does any one here has some say about these?

Thanks.

minjiang

Tue Jul 17 11:51:42 SGT 2001:<I> <Security> Access failed (Thread =
Thread[Execu
teThread-10,5,Execute Thread Group])
java.lang.SecurityException: User "APPLEJMS" does not have Permission
"lookup" b
ased on ACL "weblogic.jndi.kbf".
at weblogic.security.acl.Security.logAndThrow(Security.java:372)

at
weblogic.security.acl.Security.checkPermission(Security.java:254)
at
weblogic.jndi.internal.NamingSecurityManagerImpl.checkPermission(Nami
ngSecurityManagerImpl.java:98)
at
weblogic.jndi.internal.NamingSecurityManagerImpl.checkLookup(NamingSe
curityManagerImpl.java:45)
at
weblogic.jndi.toolkit.BasicWLContext.resolveName(BasicWLContext.java:
737)
at
weblogic.jndi.toolkit.BasicWLContext.lookup(BasicWLContext.java:133)
at javax.naming.InitialContext.lookup(InitialContext.java:354)
at
weblogic.ejb.internal.StatefulEJBHome.wrapEJBObject(StatefulEJBHome.j
ava:170)
at
weblogic.ejb.internal.StatefulEJBHome.findOrCreateEJBObject(StatefulE
JBHome.java:275)
at
weblogic.ejb.internal.StatefulEJBHome.findOrCreateEJBObject(StatefulE
JBHome.java:258)
at
com.kbf.ejb.exchangerate.ExchangeRateBeanHomeImpl.findAll(ExchangeRat
eBeanHomeImpl.java:304)
at
com.kbf.ejb.exchangerate.ExchangeRateBeanHomeImpl_ServiceStub.findAll
(ExchangeRateBeanHomeImpl_ServiceStub.java:184)
at
com.kbf.ejb.remotemgr.RemoteMgrBean.getOldCurrPairRates(RemoteMgrBean
.java:1223)
at
com.kbf.ejb.remotemgr.RemoteMgrBeanEOImpl.getOldCurrPairRates(RemoteM
grBeanEOImpl.java:160)
at
com.kbf.ejb.remotemgr.RemoteMgrBeanEOImpl_WLSkel.invoke(RemoteMgrBean
EOImpl_WLSkel.java:387)
at
weblogic.rmi.extensions.BasicServerObjectAdapter.invoke(BasicServerOb
jectAdapter.java:347)
at
weblogic.rmi.extensions.BasicRequestHandler.handleRequest(BasicReques
tHandler.java:86)
at
weblogic.rmi.internal.BasicExecuteRequest.execute(BasicExecuteRequest
.java:15)
at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:129)