// return true if authorization succeeds, false otherwise.
private boolean authorizeCORBA(byte[] object_id, String method)
throws Exception {
// Check if target is an EJB
POAProtocolMgr protocolMgr = (POAProtocolMgr)
Switch.getSwitch().getProtocolManager();
// Check to make sure protocolMgr is not null.
// This could happen during server initialization or if this call
// is on a callback object in the client VM.
if ( protocolMgr == null )
return true;
if ( protocolMgr.getEjbDescriptor(object_id) != null )
return true; // an EJB object
if ( System.getSecurityManager() == null ) {
_logger.log(Level.FINE, "SecurityManager is disabled so cannot check against policy");
return true;