Oracle WebLogic Server 11g Administration Handbook

Security-Related Deployment Descriptors

When deploying an application into the WebLogic Server environment, an administrator or security administrator may need to know how to interpret the security configured in an application in order to provide the correct binding to roles in LDAP or in the database. Web application developers can programmatically set up security through annotations or do so declaratively with the help of deployment descriptors. However, many security-related elements in a web application deployment descriptor can't be set through annotations. For this reason, using deployment descriptors for security is more or less a necessity, although it is recommended that you use annotations where possible, so it's important for the ...