IBM WebSphere V5.0 Security - CGISecurity

►
Boolean isCallerInRole(String roleName)
The isCallerInRole method allows the developer to make additional checks
on the authorization rights of a user which are not possible, or more difficult,
to perform through the deployment descriptor of the EJB.
EJBContext ejbContext;
...
if (ejbContext.isCallerInRole(““))
// Perform some fuction
else
// Throw a security exception
The isCallerInRole(String role) method returns true if the user is in the
specified role, and false if it is not. The role name specified in the method is
really a security role reference, not a role. If the security role reference is not
defined for the EJB, the method will return null.
Sample usage of security methods
The following example is a modified code snippet from the ITSOBank sample
application. You can find similar code in the TransferBean.java in the
transferBranch2Customer() method. For more details, check the comments in
the source below, or in the original sample application.
Example 8-1 Sample code using the EJB security methods
// getting the environment variables for restricted role
// and for maximum transferable amount
restrictedRole=(String)environment.lookup("RestrictedRole");
maxEJBTransferAmount=(Integer)environment.lookup("MaxEJBTransferAmount");
// checking if the user is restricted to a certain amount of transfer
if(mySessionCtx.isCallerInRole(restrictedRole) &&
transferAmount>maxEJBTransferAmount.intValue()) {
// the user cannot transfer the requested amount
return false;
}
// get the caller principal, then the user name
java.security.Principal callerPrincipal=mySessionCtx.getCallerPrincipal();
String callerName =callerPrincipal.getName();
// print out the user information about the EJB method invocation
System.out.println("... method was invoked on the Transfer EJB by:
"+callerName);
With the security methods, the EJB will not let the user in a restricted role to
submit a transfer greater than the maximum transferable amount.
Chapter 8. Programmatic security 181