[jboss-user] [Installation, Configuration & DEPLOYMENT] - Re: How to secure beans ?

[PeterJ]

I assume that you are asking how to restrict access to methods in EJB 3 session beans. To do this, you need to do two things.

First, secure your EJB. To do this, use the annotations @SecurityDomain on the class and @PermitAll and @RolesAllowed on the methods, or use the XML configuration file equivalents. Any EJB 3 book should tell you how to do this.

Second, define the security domain within JBoss AS by editing the server/xxx/conf/login-conf.xml file. You can read about this at http://docs.jboss.com/jbossas/guides/j2eeguide/r2/en/html_single/#ch8.chapter

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4080063#4080063

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4080063