Hibernate version: 3.1.2

Application server: JBoss 4.0.2

Name and version of the database you are using:Oracle 8.1.7

Hi,

We are building a web application with EJB session beans and Hibernate in the backend. For auditing purposes we would like to use Hibernate interceptors. For every table manipulation two columns have to be set: modify date and modify user.
The modify date is easy. But how can I get a hold on the user (in the interceptor) that is logged on in the web application that is in the EJB context ?

Thanks anyway,

Joris Wijlens

Code a PrincipalHolder that has a ThreadLocal attribute and static accessors where you can store the Principal in the ThreadLocal. Then you have basically two hooks where you can retrieve and set the Principal on the PrincipalHolder:

in the Session Bean using 'getSessionContext().getCallerPrincipal();'

in a Servlet Filter casting the ServletRequest to a HttpServletRequest and using 'request.getUserPrincipal()'. This of course only works if your web layer is running in the same JVM as your Beans.

In the hibernate interceptor you can use the PrincipalHolder to get the logged in user.

Thank you very much for your reply, it send me in the right direction. Instead of using a servlet filter or 'getSessionContext().getCallerPrincipal();' in the session beans, I implemented a jboss interceptor that intercepts every invocation to session beans and puts the principal on the principalholder this works very well. The code looks like this:



and:



Joris Wijlens