Consider the following test:

==============
/**

• Test a Method Permission for all methods of an EJB
  */
  public void testAllStarEJBMethodPermission()
  {
  EJBMethodPermission policyPerm = new EJBMethodPermission("ejbName",
  null, null, new String[0]);

EJBMethodPermission userPerm = new EJBMethodPermission("ejbName",
"create", dummyInterface.class.getMethods()[0]);

EJBMethodPermission userPerm2 = new EJBMethodPermission("ejbName", "a", "LocalHome", new String[]

);

assertTrue(policyPerm.implies(userPerm));
assertTrue(policyPerm.implies(userPerm2));
}

========================================

The check for userPerm2 fails.

The permission in the Policy should check for "null" methodName (which implies "*") and also for the methodSignature to be "" (or String[0])