title: Controlling the security Principle passed on a EJB call
body: <p>I am working on a large existing EJB 1.1 application that current does its own sercurity and has no EJB managed security. </p>
  
  <p>I am trying to move to a more standard solution in small steps, and so I want to start controlling the security Principle being passed to the EJB. I am not going to be able to change the current login or security framework, so I don't belive I can move to JAAS at the present time.</p>
  
  <p>Once I have created a java.security.Principle where do I store it so it is passed in my ejb calles and avalable from context.getCallerPrincipal()?</p>
  
  <p>Thanks.</p>