Wrong Instruction Class (6E 00) when with APDU for SELECT installer applet

Hi
I started up with developing SIM Application Toolkit Applets last week.
I compiled and converted a sample applet, but I can't get to load it onto the SIM card.
I am using a SIM reader/writer to issue the APDU commands in the script file that I had generated using the scriptgen command of the Java Card Development Kit, but I keep getting response 6E 00 (ie wrong instruction class) when I first issue the APDU that selects the Installer applet {00 A4 04 00 09 a0 00 00 00 62 03 01 08 01 (9000)}.
I also tried using GPshell to install my applet to the SIM card, but I would also get Wrong Instruction Class when it tries to issue the APDU that does the installer applet selection.
I don't know if I'm doing the right thing to load my applet to the SIM or if I'm completely off track, and if I am doing this right, I don't know why it isn't working.
Thanks in advance.
Best, Shadi AKIKI

Shadi_Akiki wrote:
Hi
I started up with developing SIM Application Toolkit Applets last week.
I compiled and converted a sample applet, but I can't get to load it onto the SIM card.
I am using a SIM reader/writer to issue the APDU commands in the script file that I had generated using the scriptgen command of the Java Card Development Kit, but I keep getting response 6E 00 (ie wrong instruction class) when I first issue the APDU that selects the Installer applet {00 A4 04 00 09 a0 00 00 00 62 03 01 08 01 (9000)}.
I also tried using GPshell to install my applet to the SIM card, but I would also get Wrong Instruction Class when it tries to issue the APDU that does the installer applet selection.
I don't know if I'm doing the right thing to load my applet to the SIM or if I'm completely off track, and if I am doing this right, I don't know why it isn't working.
Thanks in advance.
Best, Shadi AKIKIcan someone please tell me what do does bytes mean: {00 A4 04 00 09 a0 00 00 00 62 03 01 08 01 (9000)}.
I know cla, ins ter p1 in p2... but dont know how to set fid, size and so one when i am creating file... help

Similar Messages

  • Possible to have mouse activated slider with buttons for selection

    Hi,
    I was wondering if anyone has/is or if this can be dome easy enough....
    For example, instead of placing a row of buttons on the bottom of the template, instead, is it possibloe to have a mouse activated slider that the buttons are on and is activated when the mouse hovers over it.....?
    Hope that explanation is clear enough...;-)
    Cheers
    Rossco

    Captivate 7 has an option to show playbar on hover.  It becomes available when you select Overlay Playbar.  But this only applies to the standard skins that come with Captivate.  It won't help your specific need to have a set of buttons appear on hover over a hit area.
    It should be possible to do what you want.  But you'll need to group the buttons, give the group a name, create separate advanced actions that apply a fly-in and fly out effect to the group, then execute these actions via an event.  In your case you want the event to occur as a result of a rollover and rollout on a hit area.
    Captivate's slidelet object has a rollover event, but no rollout event you can use.
    The only way I know to have both rollover and rollout events is to use the Infosemantics Event Handler widget:
    http://www.infosemantics.com.au/adobe-captivate-widgets/event-handler-interactive
    Free trial version here:
    http://www.infosemantics.com.au/adobe-captivate-widgets/download-free-trial-widgets

  • Help with code for Selection Box

    Hi All,
    I have written the below code in the Data Section of the infoset
    BEGIN OF IT_TYP-SALE OCCURS 0,
      LTEXT TYPE TVKOT-VTEXT,
    END OF IT_TYP-SALE.
    DATA: IT_RETURN LIKE DDSHRETVAL OCCURS 0 WITH HEADER LINE.
    The code works fine, but when the user presses F4 in the box which opens the header displayed is 'Name' which is the header for TVKOT-VTEXT. I would like to know how i can define a custom header Eg: 'Company Name'.
    Hope my problem is clear, await assitance.
    Vivek

    Hi,
    Thanks for the inputs, what i really need is how i can define a custom text. As the header i want to display is not a standard field header. So in that case how should i declare?
    Note: The Company Name was only a example.
    Any suggestion on how i can have a custom name appearing as the header instead of the table field header?
    Edited by: Vivek on Jan 8, 2008 9:35 PM

  • Problems with suggestions for selection boxes

    I first found this problem when typing in Google Maps selection box. If I type an A in the box, I am given several suggestions from my web history starting with A, but I can't find any way (single or double-click or drag) to make any of the suggestions go into the box. I tried Restart with Add-Ons Disabled but that doesn't help.

    I first found this problem when typing in Google Maps selection box. If I type an A in the box, I am given several suggestions from my web history starting with A, but I can't find any way (single or double-click or drag) to make any of the suggestions go into the box. I tried Restart with Add-Ons Disabled but that doesn't help.

  • What filename is Bootcamp looking for when it searches for Windows installer?

    I purchased a download file of Windows 7 Home Premium x64 which when downloaded has the filename X15-65733.iso.   When opened it provides a diskimage called GRMCHPXFRER_EN_DVD on which are the files and folders for the Windows 7 installation:
    autorun.inf
    boot
    bootmgr
    bootmgr.efi
    efi
    setup.exe
    sources
    support
    upgrade
    However the Bootcamp Assistant does not recognize the X15-65733.iso or the GRMCHPXFRER_EN_DVD disk image as the Windows installer.  Do I have to rename one of these to something that the Bootcamp Assistant is looking for?

    I had to burn the file X15-65733.iso onto a CD in order for my iMac to find it.  I had been trying to install from a flash drive (memmory stick)

  • Help with timeout for select inside loop

    Hi everyone, im a little confused with this code. Can you help me to optimize it? Its giving Timeout dump.
    Thanks so much, I´m new in abap and I tried hard, but its getting worse.
    Any idea is welcomed.
    LOOP AT it_lips.
        SELECT SINGLE *
          FROM vbak
         WHERE vbeln = it_lips-vgbel.
        IF sy-subrc <> 0 OR vbak-vbtyp <> 'C'.
          CONTINUE.
        ENDIF.
        SELECT SINGLE *
          FROM vbup
         WHERE vbeln = it_lips-vgbel
           AND posnr = it_lips-vgpos.
        IF sy-subrc = 0 AND vbup-lfgsa = 'C'.
          READ TABLE it_likp WITH KEY vbeln = it_lips-vbeln.
          IF it_likp-wadat < it_likp-wadat_ist.
            it_data-statu = 'N'.
            v_countn = v_countn + 1.
          ELSE.
            it_data-statu = 'S'.
            v_counts = v_counts + 1.
          ENDIF.
        ELSE.
          CONTINUE.
        ENDIF.
        it_data-vbeln = it_lips-vgbel.
        it_data-posnr = it_lips-vgpos.
        SELECT SINGLE matnr arktx kwmeng vrkme
          INTO (it_data-matnr, it_data-arktx, it_data-mengs, it_data-vrkme)
          FROM vbap
         WHERE vbeln = it_lips-vgbel
           AND posnr = it_lips-vgpos.
        it_data-menge = it_data-mengs.
        it_data-kunnr = vbak-kunnr.
        SELECT SINGLE name1
          INTO it_data-name1
          FROM kna1
         WHERE kunnr = it_data-kunnr.
        it_data-edatu = it_likp-wadat.
        it_data-wadat = it_likp-wadat_ist.
        it_data-vkorg = it_likp-vkorg.
        APPEND it_data.
        CLEAR: it_data, vbak, it_vbep, vbap, kna1, it_lips, it_likp.
      ENDLOOP.

    The issue of SELECTing within a LOOP is much overblown. All of the SELECTs are SELECT SINGLE using the fully qualified primary key. Using a JOIN or FOR ALL ENTRIES might speed this up a bit, but dollars to doughnuts, the problem is here:
    READ TABLE it_likp WITH KEY vbeln = it_lips-vbeln.
    If it_likp is a standard table, you will be reading half of all of the entries, on average, every time you do the read. If you don't want to change it to a sorted or hashed table, SORT it_likp by vbeln before going into the loop and use the addition BINARY SEARCH on the READ statement.
    Rob
    Edited by: Rob Burbank on Apr 18, 2010 9:34 PM
    Edited by: Rob Burbank on Apr 19, 2010 10:15 AM

  • Need help with SQL for selecting ID where the sequence does not match..

    I have the following dilemma:
    Database contains IDs as follows:
    Incident#, Case#, & Part Sequence#
    example
    Record 1
    Incident_Number = 123456
    Case_Number = 1
    Part_sequence = 1
    Record 2
    Incident_Number = 123456
    Case_Number = 1
    Part_sequence = 2
    Sometimes the user will delete (let's say) Record 2 after creating a new Record 3
    So now the sequencing goes as follows:
    Record 1
    Incident_Number = 123456
    Case_Number = 1
    Part_sequence = 1
    Record 2
    Incident_Number = 123456
    Case_Number = 1
    Part_sequence = 3
    Now there will no longer be a Part_Sequence 2
    Need a SQL to select all records where the maximum part sequence > than the count of Incident_number||'-'||Case_number
    I tried the following:
    select a.incident_number||'-'||a.case_number||'-'||a.part_sequence
    from chsuser.a_compl_summary a
    where a.entry_date >= '01-may-2011'
    and max(a.part_sequence) > count(distinct a.incident_number||'-'||a.case_number)I end up getting a ORA-00934: group function is not allowed here (highlighting on the Max(a.part_sequence) portion.
    Any suggestions/hints
    Thanks

    select  incident_number || '-' || case_number || '-' || part_sequence
      from  (
             select  incident_number,
                     case_number,
                     part_sequence,
                     max(part_sequence) over(partition by incident_number,case_number) max_seq,
                     count(*) over(partition by incident_number,case_number) cnt
               from  chsuser.a_compl_summary
               where entry_date >= DATE '2011-05-01'
      where cnt != max_seq
    /SY.

  • Wrong ELF class error when trying to run the emulator

    Hello, I've downloaded and installed both the JDK 6 Update 2 (Linux 64) and WTK 2.5.1 as described in the website and everything seems to be fine. However, whenever I try to run an examples, I get the following error:
    java.lang.UnsatisfiedLinkError: /home/myuser/WTK2.5.1/bin/sublime.so: /home/myuser/WTK2.5.1/bin/sublime.so: wrong ELF class: ELFCLASS32 (Possible cause: architecture word width mismatch)
         at java.lang.ClassLoader$NativeLibrary.load(Native Method)
         at java.lang.ClassLoader.loadLibrary0(ClassLoader.java:1751)
         at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1647)
         at java.lang.Runtime.load0(Runtime.java:770)
         at java.lang.System.load(System.java:1005)
         at com.sun.kvem.Sublime.<init>(Unknown Source)
         at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
         at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
         at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
         at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
         at java.lang.Class.newInstance0(Class.java:355)
         at java.lang.Class.newInstance(Class.java:308)
         at com.sun.kvem.Lime.createLime(Unknown Source)
         at com.sun.kvem.KVMBridge.<init>(Unknown Source)
         at com.sun.kvem.KVMBridge.getBridge(Unknown Source)
         at com.sun.kvem.midp.MIDP.run(Unknown Source)
         at com.sun.kvem.environment.EmulatorInvoker.runEmulatorImpl(Unknown Source)
         at com.sun.kvem.environment.EmulatorInvoker.main(Unknown Source)
         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
         at java.lang.reflect.Method.invoke(Method.java:597)
         at com.sun.kvem.environment.JVM.main(Unknown Source)
    I'm running Fedora 7 x86_64
    My Java environment is:
    java version "1.6.0_02"
    Java(TM) SE Runtime Environment (build 1.6.0_02-b05)
    Java HotSpot(TM) 64-Bit Server VM (build 1.6.0_02-b05, mixed mode)
    My jre is a 64-bit version but the ktoolbar seems to be compatible with 32-bit versions only. is there a way to fix this?
    Any help is appreciated.

    Hi there,
    I'm having the same problem when running the emulator. I've tried changing the emulator file as suggested but have had no luck! I'm using Ubuntu and the java version im using is
    java version "1.6.0_03"
    Java(TM) SE Runtime Environment (build 1.6.0_03-b05)
    Java HotSpot(TM) 64-Bit Server VM (build 1.6.0_03-b05, mixed mode)
    I have the latest version of the WTK also. The error message I get is
    ava.lang.UnsatisfiedLinkError: /home/john/Progs/WTK2.5.2/bin/sublime.so: /home/john/Progs/WTK2.5.2/bin/sublime.so: wrong ELF class: ELFCLASS32 (Possible cause: architecture word width mismatch)
         at java.lang.ClassLoader$NativeLibrary.load(Native Method)
         at java.lang.ClassLoader.loadLibrary0(ClassLoader.java:1751)
         at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1647)
         at java.lang.Runtime.load0(Runtime.java:770)
         at java.lang.System.load(System.java:1005)
         at com.sun.kvem.Sublime.<init>(Unknown Source)
         at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
         at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
         at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
         at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
         at java.lang.Class.newInstance0(Class.java:355)
         at java.lang.Class.newInstance(Class.java:308)
         at com.sun.kvem.Lime.createLime(Unknown Source)
         at com.sun.kvem.KVMBridge.<init>(Unknown Source)
         at com.sun.kvem.KVMBridge.getBridge(Unknown Source)
         at com.sun.kvem.midp.MIDP.run(Unknown Source)
         at com.sun.kvem.environment.EmulatorInvoker.runEmulatorImpl(Unknown Source)
         at com.sun.kvem.environment.EmulatorInvoker.main(Unknown Source)
         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
         at java.lang.reflect.Method.invoke(Method.java:597)
         at com.sun.kvem.environment.JVM.main(Unknown Source)
    Any help with this would be much appreciated!
    John

  • Iphone 4s wont sync when I connect it to the pc( not apple). It is connected as it comes up on itunes but when I try to sync it with apps/ music etc it wont. I am doing something wrong or is it a mistake with the phone.

    My iphone 4s wont sync when I connect it to the pc( not apple). It is connected as it comes up on itunes but when I try to sync it with apps/ music etc it wont. I am doing something wrong or is it a mistake with the phone. I am still able to download apps and music from itunes on my phone though.
    I already restored it but that didn't help.
    TIA for any replies.

    iPod touches or any iDevices from Apple sync only to one computer. If you sync to a different computer, all your music will be replace with the music from the new computer's iTunes. If the music were purchased from iTunes, you can re-download them again otherwise the music on iPod touch will be deleted. Do you have iTunes backup? 

  • With FireFox as my default browser, I create a shortcut on the desktop as per instructions in 'help' but when I click on the shortcut it opens in a browser which is not even running.

    With FireFox as my default browser, I create a shortcut on the desktop as per instructions in 'help' but when I click on the shortcut it opens in a browser which is not even running.

    -
    Make absolutely certain that FireFox is designated as your default browser.
    Do this: Tools / Options / Advanced / Check Now / correct the setting
    OR right click on any shortcut icon / Open With / Choose Default Program / select desired Browser / check Always... box / OK
    ----SOLVED-----------
    -

  • When to use abstract classes instead of interfaces with extension methods in C#?

    "Abstract class" and "interface" are similar concepts, with interface being the more abstract of the two. One differentiating factor is that abstract classes provide method implementations for derived classes when needed. In C#, however,
    this differentiating factor has been reduced by the recent introduction of extension methods, which enable implementations to be provided for interface methods. Another differentiating factor is that a class can inherit only one abstract class (i.e., there
    is no multiple inheritance), but it can implement multiple interfaces. This makes interfaces less restrictive and more flexible. So, in C#, when should we use abstract classes
    instead of interfaces with extension methods?
    A notable example of the interface + extension method model is LINQ, where query functionality is provided for any type that implements IEnumerable via
    a multitude of extension methods.

    Hi
    Well I believe Interfaces have more uses in software design. You could decouple your component implementing against interfaces so that
    you have more flexibility on changing your code with less risk. Like Inversion of Control patterns where you can use interfaces and then when you decide you can change the concrete implementation that you want to use. Or other uses for interfaces is you could
    use Interceptors using interfaces (Unity
    Interceptor) to do different things where not all of these is feasible or at least as straightforward using abstract classes.
    Regards
    Aram

  • Wrong ELF class: ELFCLASS64 when trying to start HTTP Server

    Oracle11gR1 Database on OEL 5 64bit with Oracle10gR3 (10.1.3.3.0) Application Server
    I have finished installing Oracle Application Server and in the end it fails to bring up HTTP Server. I checked the logs and saw the following:
    /opt/app/oracle/product/11.1.0/http_1/ohs/bin/apachectl startssl: execing httpd
    /opt/app/oracle/product/11.1.0/http_1/ohs/bin/httpd: error while loading shared libraries: libgdbm.so.2: wrong ELF class: ELFCLASS64
    I am thinking that it could be a 32bit vs. 64bit libraries. I have tried to create some links but still no luck. Below are the current links that I have in the /usr/lib and /usr/lib64 directories.
    1. /usr/lib
    # ls -al libgdbm*
    lrwxrwxrwx 1 root root 16 Sep 3 09:47 libgdbm.so.2 -> libgdbm.so.2.0.0
    -rwxr-xr-x 1 root root 26792 Sep 3 09:41 libgdbm.so.2.0.0
    2. /usr/lib64
    # ls -al libgdbm*
    lrwxrwxrwx 1 root root 16 Sep 3 10:17 libgdbm.so -> libgdbm.so.2.0.0
    lrwxrwxrwx 1 root root 16 Jul 18 04:34 libgdbm.so.2 -> libgdbm.so.2.0.0
    -rwxr-xr-x 1 root root 26792 Jun 5 2007 libgdbm.so.2.0.0
    lrwxrwxrwx 1 root root 23 Sep 3 10:19 libgdbm.so.3 -> /usr/lib64/libgdbm.so.2
    Thank you.

    My OEL 5 also had the gdbm package installed, but only the 64bit version.
    I've installed the i386 version also and now it works.
    To check to which dynamic libraries a binary will use you issue the command ldd <binary>
    Then you could check to which he will be linked.
    Be aware that library resolving could be influenced by environment variables which will sometime also be set(overwritten) by the calling script.
    ldd /u01/app/oracle/product/admin/web10g/ohs/bin/httpd
         linux-gate.so.1 => (0xffffe000)
         libaprutil-0.so.0 => not found
         libgdbm.so.2 => /usr/lib/libgdbm.so.2 (0xf7f04000)
         libdb-3.3.so => /lib/libdb-3.3.so (0xf7e0d000)
         libexpat.so.0 => /lib/libexpat.so.0 (0x00b64000)
         libapr-0.so.0 => not found
         libpthread.so.0 => /lib/libpthread.so.0 (0x00707000)
         librt.so.1 => /lib/librt.so.1 (0x007ef000)
         libm.so.6 => /lib/libm.so.6 (0x00726000)
         libcrypt.so.1 => /lib/libcrypt.so.1 (0xf7dda000)
         libnsl.so.1 => /lib/libnsl.so.1 (0xf7dc3000)
         libdl.so.2 => /lib/libdl.so.2 (0x00720000)
         libc.so.6 => /lib/libc.so.6 (0x005c1000)
         /lib/ld-linux.so.2 (0x005a3000)
    Two libraries still not found but they are resolved by a env. variable setting by opmn.
    To get to your issue, check if the httpd is resolving to the correct ( the 32bit ) libraries.
    Hope this helps.

  • JPA Toplink, class cast exception when casting class A to class A

    I get a really strange exception from Toplink JPA. I used netbeans to create a persistence.xml and I generated a class (entity) from the table in a DB. Everything works fine, when I create a select query, I get the list of objects and the list is correctly typed. I can the objects in the list in debug mode with every field correctly set. But then I need to start working with the list, so I iterate through the list. And then I get ClassCastException from class A to class A (when A is the canonical name of the entity class).
    I was working with JPA for some time but never seen that. I am using glassfish v2, mysql, netbeans 6.1. I could post the classes and persistence xml, but persistence.xml is really simple (no class definitions) and the class is annotated by netbeans. Every field is annotated like this:
    @Column(name = "name", nullable = false)
    And Date columns have
    @Temporal(TemporalType.TIMESTAMP)
    The whole class is annotated with @Table.
    Does anyone has any idea, what can be wrong?

    DrClap wrote:
    Make sure your URLClassLoader cannot load the IAdapter class.
    That is not exactly correct. He needs to make sure his URLClassloader has access to the IAdapter class. Sure, it should not load it on its own, but if requested the URLClassloader should be able to ask a parent to load IAdapter. Which in the end looks the same. But is not the same.
    So set the parent classloader of your URLClassloader to a classloader capable of loading IAdapter.

  • Kmines: don't start | wrong ELF class: ELFCLASS64

    i have installed kmines but when open i get:
    kmines: error while loading shared libraries: libopenal.so.1: wrong ELF class: ELFCLASS64
    $ ~ ls -l /usr/lib/libopenal*
    -rwxr-xr-x 1 root root 356849 ago  6 19:18 /usr/lib/libopenal.so.1.14.0
    lrwxrwxrwx 1 root root     14 ago  6 21:18 /usr/lib/libopenal.so.1 -> libopenal64.so
    -rw-r--r-- 1 root root 395431 ago  6 19:18 /usr/lib/libopenal64.so
    lrwxrwxrwx 1 root root     14 abr  1  2012 /usr/lib/libopenal.so -> libopenal.so.1
    I have arch linux 32bits with kde...
    Last edited by fpilee (2012-11-26 16:43:06)

    $ ~ ls -l /usr/lib/libopenal*
    -rwxr-xr-x 1 root root 338188 abr 1 2012 /usr/lib/libopenal.so.1.14.0
    lrwxrwxrwx 1 root root 14 nov 23 00:57 /usr/lib/libopenal.so.1 -> libopenal64.so
    -rw-r--r-- 1 root root 395431 ago 6 19:18 /usr/lib/libopenal64.so
    lrwxrwxrwx 1 root root 14 abr 1 2012 /usr/lib/libopenal.so -> libopenal.so.1
    i will modify the soft links to follow your format.
    is better replace libopenal64.so with Libopenal.so.1.14.0         
    #mv /usr/lib/libopenal.so.1 /usr/lib/libopenal.so.1.bak
    #ln -s /usr/lib/libopenal.so.1.14.0 /usr/lib/libopenal.so.1
    #ls -l /usr/lib/libopenal*
    -rw-r--r-- 1 root root 395431 ago 6 19:18 /usr/lib/libopenal64.so
    lrwxrwxrwx 1 root root 14 abr 1 2012 /usr/lib/libopenal.so -> libopenal.so.1
    lrwxrwxrwx 1 root root 28 nov 23 21:49 /usr/lib/libopenal.so.1 -> /usr/lib/libopenal.so.1.14.0
    -rwxr-xr-x 1 root root 338188 abr 1 2012 /usr/lib/libopenal.so.1.14.0
    lrwxrwxrwx 1 root root 14 nov 23 00:57 /usr/lib/libopenal.so.1.bak -> libopenal64.so
    Last edited by fpilee (2012-11-26 16:47:45)

  • Object vs Class base authorization concepts with J2EE/JAAS

    Hello,
    I'm evaluating J2EE and JAAS and I'm wondering how I can implement my business model using these techniques:
    As far as I understand JAAS, it's a class based authorization architecture. What I need is an object based architecture, specially when using CMP entity beans.
    Is it possible to design an object based access control based on JAAS and (perhaps) CMP entity beans?
    More detailed:
    Let's look at a simple (web-) application: A database contains only a table with documents, a document consists of an ID (primary key) and some plain text.
    I've got two EJB, one for editing documents and one for reading documents.
    Now I can easily design my application with J2EE and JAAS:
    An "editor" role with access on the edit bean and a "reader" role with access on the reader bean.
    The document class could be easily implemented as a CMP entity.
    BUT: What happens if I need a restriction on WHAT documents a user/role can edit/read, in other words, if authorization is not controlled by the EJB (code/class based) but by the ID (primary key/object based).
    E.g.
    User1 should have read access on Doc1, but not on Doc2.
    User2 should have read and write access on Doc2, but not on Doc1...
    As far as I understand JAAS, it's not possible to solve this problem using JAAS. If this is right, then I have to implement my own authorization system, JAAS could only be used for authentication. In this case, JAAS is just a tier in the security concept, just like different database users with restricted access to different tables and fields.
    If I'm right, then it's not possible (or possible but it makes no sense) to use CMP entity beans, because I can't use the "automatic" authorization pattern (I have to call my own access control system before invoking the entity bean, and so my clients loose some of their "leightweight").
    Regards,
    Jens

    Hi,
    I have study JAAS with J2EE for the last two months, don't know whether my ideas can help you. I believed JAAS was designed for java programmer who wanted to have security implement in there application but do not want to write the security themself. JAAS provided a robust system so that someone else can come alone to plug in the security module and security would be implemented.
    Base on your problems, I think what you should do is to have what know as a security access level implement in your object. When you uses JAAS to verify username & password, you can get user's access level as well maybe from LDAP server attribute, store in your principal. So whenever you want to check whethere you're a editor or author.
    You have to identify what is business logic and security logic access level is a business logic, therefore you will have to implement in your application tier. There is no perfect solution, but having these module will save you lots of coding and flexibility.
    Cheers,
    ps: Please correct me if my view are wrong.

Maybe you are looking for

  • ITunes 11.0.2 removes iPhone/iPod Music list from sidebar?

    I just updated to iTunes 11.0.2 and have been using 11.x using the left hand sidebar. Once I updated to 11.0.2, I no longer have an arrow to the left of my iPhone, giving me the option to view my Playlists, Music Library, etc. Anyone else having this

  • Different versions of Java got installed, only want 1

    Hi folks, I have a new iMac, running OS X v10.9.1. I downloaded and installed the Mac version of the latest Eclipse IDE. When i tried to run it the first time, it said it needed to also install Java v 1.6. This isn't the latest Java version but I wan

  • I think this is a bug for icloud on PC

    My icloud's photo stream didn't work although I had finished the setting steps on guide. And there is one thing that I think strange. I logged in icloud, with my apple ID on my PC(windows 7). Enable the photo stream option, and then I logged out. At

  • Auto start weblogic 11gR1 as windows service?

    I have installed Weblogic Server 11gR1 and created a domain with only one server (Administration Server). I wonder if I can configure to run as windows service, in case of windows update and auto restart

  • FIM 2010 R2 SP1 - Installing CA Modules

    I have a customer with on a CA running on Windows Server 2008 Standard edition - when trying to install the CA modules in as part of a CM deployment I get an error saying "This software requires Microsoft Windows Enterprise or Datacenter Edition". I