EJB Security Mechanisms
EJB technology promotes the following development model: Bean Providers develop EJBs; Application Assemblers assemble EJBs into working applications; Deployers deploy these applications to specific J2EE App Servers; and Administrators look after day-to-day operations such as adding new users, assigning them appropriate privileges, monitoring system performance, and so on.
For this model to work, a player in one role must make security decisions in such a manner that these decisions don't become overly restrictive for subsequent operations by a player in a different role. For example, a bean provider must not assume the existence of a particular account management system, for the choice of a particular account management ...
Get J2EE™ Security for Servlets, EJBs and Web Services: Applying Theory and Standards to Practice now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
