5.1. Securing EJBs

EJBs, or Enterprise Java Beans, are J2EE components which implement the business logic of an application. They typically have access to sensitive data, and it is very important to understand how security is applied to these resources.

There are three types of EJBs:

  1. Session Beans, which represent clients inside the J2EE server. Clients call session bean methods to access an application.

  2. Entity Beans, which represent persistent business objects in an application’s relational database. Typically, each entity bean has an underlying table in the database, and each instance of the bean corresponds to a row in that table.

  3. Message-Driven Beans, which allow J2EE applications to process messages asynchronously. Message-driven beans’ methods ...

Get IBM WebSphere V5.0 Security: WebSphere Handbook Series now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.