Subclassed EJB with RolesAllowed annotation not giving permission

Question

A servlet is calling a method of an EJB (name EJB B). EJB B is a sub class of EJB A which contains the method and is not overridden by EJB B.
EJB A uses the annotation @RolesAllowed({"user","system","admin"})
EJB B uses the annotation @RolesAllowed({"system"})
When the call is made by the servlet the following error is produced:
JBAS014134: EJB Invocation failed on component EJB B for method xxxx: javax.ejb.EJBAccessException: JBAS014502: Invocation on method: xxxx throws exception of bean: EJB B is not allowed
If I replace the EJB A annotation with @PermitAll then the method is called without the permission problem.
I am wondering why the 'system' role allowed in EJB A is ignored in the annotation and the exception is thrown.
Is this a bug perhaps?

Answer 1

Hi Jay Bhaiya,
I am getting the correct output by following the below:
1: Change the SecurityRolesImpl.java to provide the below role that can access the EJB method:
*@RolesAllowed({"TestRole"})*
2: Then build the service as normal using the same build.xml
3: Do not depoly the EAR using ant and try to use the Admin Console to deploy the EAR.
4: While deploying the application through the admin console choose the below option:
Custom Roles: Use roles that are defined in the Administration Console; use policies that are defined in the deployment descriptor.
5: Then create the client stubs using the build.xml
6: Then go to the Admin Console.
Security Realm >> my realm >> users and Groups >> create a user TestUser ( pass- TestUser).
7: Then Click on the RolesAllowedEar under the depolyments tab.
Click on Security >> Roles ..
Create a New Role >>> TestRole.
Click on the Role created (TestRole) >>> Add Condition >>>
Within Add Condition >> select User >> NEXT >>>
Enter TestUser >>> Click ADD .
Click Save.
Now try to access the Web Service using the client code.
Thanks,
Sandeep