<?xml version="1.0" encoding="UTF-8"?>

<!-- -->
<!-- This JBoss.Net Web Service Descriptor has been generated by XDoclet  -->
<!-- and is brought to you by F. M. Brier, C. G. Jung and J. Essington    -->
<!-- -->

<deployment
    name="Security" 
    xmlns="http://xml.apache.org/axis/wsdd/"
    targetNamespace="http://net.jboss.org/security"
    xmlns:security="http://net.jboss.org/security"
    xmlns:java="http://xml.apache.org/axis/wsdd/providers/java">

<!-- The following are declarations of service endpoints targetted to
     session beans -->

  <service name="Authorization" provider="Handler">
    <parameter name="handlerClass" value="org.jboss.net.axis.server.EJBProvider"/>
    <parameter name="beanJndiName" value="security/Authorization"/>
    <parameter name="allowedMethods" value="workedOut "/>
    <requestFlow name="AuthorizationRequest">
      <handler type="java:org.jboss.net.axis.server.JBossAuthenticationHandler">
        <parameter name="securityDomain" value="java:/jaas/other"/>
      </handler>
      <handler type="java:org.jboss.net.axis.server.JBossAuthorizationHandler">
        <parameter name="securityDomain" value="java:/jaas/other"/>
        <parameter name="allowedRoles" value="Role2, Role1"/>
        <parameter name="deniedRoles" value="Role3"/>
      </handler>
    </requestFlow>
    <responseFlow name="AuthorizationResponse">
    </responseFlow>
  </service>

<!-- The following are typemappings for entity beans for implementing 
     the implicit web-service value-object pattern -->

<!-- The following are typemappings for bean-type value-objects -->

<!-- There follow merged custom web service descriptions -->

</deployment>

