Hibernate version: 2.1.4

Mapping documents: N/A

Code between sessionFactory.openSession() and session.close(): N/A

Full stack trace of any exception that occurs: N/A

Name and version of the database you are using: Oracle 9i

Debug level Hibernate log excerpt: N/A

Hi everyone,

I want to use a secure datasource with Hibernate on Weblogic 8.1. Our application does not actually use Java authentication. Hence we have up until now defined a role 'app_role' on the WL server, applied a policy to the datasource of type 'User must be of role app_role' and then used the run-as element in the ejb-jar.xml to set the identity each EJB runs at:

{excerpt from ejb-jar.xml}
<session>
<ejb-name>...</ejb-name>
<local-home>...</local-home>
<local>...</local>
<ejb-class>...</ejb-class>
<session-type>Stateless</session-type>
<transaction-type>Container</transaction-type>
<security-identity>
<run-as><role-name>app_role</role-name></run-as>
</security-identity>
</session>

Is there any way to emulate this setup using Hibernate so we can access the datasource as a user of type 'app_role' in the absence of Java authentication? Clearly doing nothing means running as user 'anonymous' and being denied access to the source.
Congrats on Hibernate btw..everything I have done with it up until now has seemed to work the natural way this sort of thing should work!

Many thanks,

Marc

You can get the datasource yourself via JNDI, then give a Connection to the Session when you open it.

Actually, even better. Implement (or extend) DatasourceConnectionProvider, and specify it in hibernate.properties via hibernate.connection.provider_class

See the javadocs for ConnectionProviderFactory, ConnectionProvider and DatasourceConnectionProvider.

That is good advice, thanks very much.

Marc