IBM WebSphere V5.0 Security - CGISecurity

Assigning method-level Run-as delegation policies in
Application Assembly Tool
Delegation policies at the EJB method level can be assigned using either the
Application Assembly Tool or the WebSphere Studio.
To assign a run-as policy to an EJB method using the Application Assembly Tool,
do the following:
1. Open the EJB Modules folder for your application, and navigate to the Method
Extensions view for the EJB containing the method which you want to
delegate.
2. Select the method(s) to which you want to assign the delegation policy.
Wildcards (*) can be used to select all methods of a given type.
3. Click the Advanced tab and select the Security Identity checkbox to enable
the Run-as mode selections.
4. Enter an optional Description.
5. Select one of the following Run-as mode options:
a. Use identity of caller (this is the default)
b. Use identity of server
c. Use identity assigned to specific role.
6. If assigning a Run-as role, select the desired role from the Role Name
selection list. This list will contain all roles which have been defined in the EJB
module. The role description is optional.
7. Click Apply to keep the policy settings.
Chapter 5. Securing EJBs 89