Summary

J2EE Declarative Security Overview including the deployment descriptor security related elements for both EJBs and Web components. The use of the jboss.xml and jboss-web.xml descriptors to enable security was also discussed.

The generic JBoss security plug-in architecture was introduced. The interfaces that supported the J2EE declarative security model were discussed. Also discussed and demonstrated was the custom security interface that allowed one to enforce security constructs that cannot be described by the J2EE declarative model.

An introduction to JAAS that highlighted the authentication classes was given. The default JAAS based security manager plug-in implementation was discussed. This included its architecture, use of JAAS and ...

Get JBoss™ Administration and Development now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.