<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE ejb-jar PUBLIC
   "-//Sun Microsystems, Inc.//DTD Enterprise JavaBeans 2.0//EN" 
   "http://java.sun.com/dtd/ejb-jar_2_0.dtd">

<ejb-jar>
   <enterprise-beans>
      <session>
         <ejb-name>CallerIdentity</ejb-name>
         <home>org.jboss.test.jca.securedejb.CallerIdentityHome</home>
         <remote>org.jboss.test.jca.securedejb.CallerIdentity</remote>
         <ejb-class>org.jboss.test.jca.securedejb.CallerIdentityBean</ejb-class>
         <session-type>Stateless</session-type>
         <transaction-type>Container</transaction-type>
         <resource-ref>
            <description></description>
            <res-ref-name>jdbc/CallerIdentityDS</res-ref-name>
            <res-type>javax.sql.DataSource</res-type>
            <res-auth>Container</res-auth>
         </resource-ref>
         <resource-ref>
            <description></description>
            <res-ref-name>jdbc/ConfiguredIdentityDS</res-ref-name>
            <res-type>javax.sql.DataSource</res-type>
            <res-auth>Container</res-auth>
         </resource-ref>
      </session>
      <session>
         <ejb-name>RunAsIdentityDS</ejb-name>
         <home>org.jboss.test.jca.securedejb.CallerIdentityHome</home>
         <remote>org.jboss.test.jca.securedejb.CallerIdentity</remote>
         <ejb-class>org.jboss.test.jca.securedejb.CallerIdentityBean</ejb-class>
         <session-type>Stateless</session-type>
         <transaction-type>Container</transaction-type>
         <security-identity>
            <run-as>
               <role-name>RunAsIdentityRole</role-name>
            </run-as>
         </security-identity>
         <resource-ref>
            <description></description>
            <res-ref-name>jdbc/RunAsIdentityDS</res-ref-name>
            <res-type>javax.sql.DataSource</res-type>
            <res-auth>Container</res-auth>
         </resource-ref>
      </session>
      <session>
         <ejb-name>RunAsIdentityFS</ejb-name>
         <home>org.jboss.test.jca.securedejb.CallerIdentityHome</home>
         <remote>org.jboss.test.jca.securedejb.CallerIdentity</remote>
         <ejb-class>org.jboss.test.jca.securedejb.CallerIdentityBean</ejb-class>
         <session-type>Stateless</session-type>
         <transaction-type>Container</transaction-type>
         <security-identity>
            <run-as>
               <role-name>RunAsIdentityRole</role-name>
            </run-as>
         </security-identity>
         <resource-ref>
            <description></description>
            <res-ref-name>jndi/RunAsIdentityFS</res-ref-name>
            <res-type>javax.naming.directory.DirContext</res-type>
            <res-auth>Container</res-auth>
         </resource-ref>
      </session>
   </enterprise-beans>

   <assembly-descriptor>
      <method-permission>
         <role-name>UseCallerForAuth</role-name>
         <method>
            <ejb-name>CallerIdentity</ejb-name>
            <method-name>useCallerForAuth</method-name>
         </method>
      </method-permission>
      <method-permission>
         <role-name>UseConfiguredForAuth</role-name>
         <method>
            <ejb-name>CallerIdentity</ejb-name>
            <method-name>useConfiguredForAuth</method-name>
         </method>
      </method-permission>
      <method-permission>
         <unchecked />
         <method>
            <ejb-name>RunAsIdentityDS</ejb-name>
            <method-name>*</method-name>
         </method>
         <method>
            <ejb-name>RunAsIdentityFS</ejb-name>
            <method-name>*</method-name>
         </method>
      </method-permission>
      <method-permission>
         <role-name>CallerIdentityUser</role-name>
         <method>
            <ejb-name>CallerIdentity</ejb-name>
            <method-name>*</method-name>
         </method>
      </method-permission>

      <container-transaction>
         <method>
            <ejb-name>CallerIdentity</ejb-name>
            <method-name>*</method-name>
         </method>
         <trans-attribute>Required</trans-attribute>
      </container-transaction>
   </assembly-descriptor>
</ejb-jar>
