Oracle Corporation
System and method for supporting object-based security

Abstract:

In accordance with an embodiment, described herein is a system and method for supporting object-based security features for use with messaging services in an application server environment. Credentials can be associated with a JNDI initial context or a JMS connection instead of a thread. For JNDI operations, a lookup call from the initial context can use a security subject in an initial context regardless of a security subject attached to a current thread of the lookup call. For JMS operations, the object-based security model can be enabled on a JMS connection factory, which is used to create a JMS connection associated a security subject based on credentials supplied to create the JMS connection. The JMS connection performs a plurality of JMS operations on different threads using the security subject. The object-based security model is automatically enabled for JMS connection operations once the JMS is accessed using an OBS-enabled JNDI context.