J2EE™ Security for Servlets, EJBs and Web Services: Applying Theory and Standards to Practice
by Pankaj Kumar
EJB Security Mechanisms
EJB technology promotes the following development model: Bean Providers develop EJBs; Application Assemblers assemble EJBs into working applications; Deployers deploy these applications to specific J2EE App Servers; and Administrators look after day-to-day operations such as adding new users, assigning them appropriate privileges, monitoring system performance, and so on.
For this model to work, a player in one role must make security decisions in such a manner that these decisions don't become overly restrictive for subsequent operations by a player in a different role. For example, a bean provider must not assume the existence of a particular account management system, for the choice of a particular account management ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access