Q: EJB must not define class in package

[Yan Zhou]

What does it mean when the spec. says:

EJB must not define a class in a package?

Anyone has an example?
Thanks.
Yan

[Shahfazal Mohammed]

package package.that.destroys.reusability;
 
// import statements
 
public abstract class CustomerBeanCMP implements EntityBean {
 
// your code
 
}

As a Bean Provider, your deliverable is an ejb-jar file with your beans/interfaces/deployment-descriptor. This ejb-jar file can possibly be mixed with other ejb-jar's from the application-assembler, to better fit a domain, based on the requirements. And I guess that's why EJB spec does not recommend putting classes in packages.

HTH,

-Fazal.

[Roger Chung-Wee]

I would have thought that this is about disallowing the use of definePackage() and defineClass() of ClassLoader.

[Pourang Emami]

I read some where that defining beans in packages, will be a security hole.
If it is the case, is there any body who knows why and how?