What is the point of web services?
I really don't see the point of making EJB's into web services.  The first thing that comes to mind is security.  How do I keep the entire world from using my business methods?  How would you authenticate a user to use a service.  The second it seems hard to pass objects or if it's even possible to pass lists into a web service.

I can see some justifications such as having services for multiple applications that use the same methods.  But why not just have a library or deploy an ear with all the business methods?

Thanks for your help.

What is the point of web services?
===

I really don't see the point of making EJB's into web services.  The first thing that comes to mind is security.  How do I keep the entire world from using my business methods?  How would you authenticate a user to use a service.  The second it seems hard to pass objects or if it's even possible to pass lists into a web service.

I can see some justifications such as having services for multiple applications that use the same methods.  But why not just have a library or deploy an ear with all the business methods?

Thanks for your help.
