IBM WebSphere V5.0 Security: WebSphere Handbook Series

5.2. Defining J2EE roles for EJB modules

The method for defining security roles for EJBs and Web Components in the Application Assembly Tool is the same. For example, to add a role named manager to the EJB component, do the following:

1.	Open the .ear file of the application, in our example: itsobank.ear.
2.	Open the EJB Modules folder for your application, open the desired module under it, itsobankEJB in our case, then finally select Security Roles.
3.	If no security roles have previously been defined for EJBs, the box on the right will be empty. Right-click the space under Name, and you will see the pop-up menu. Select New to create a new security ...