IBM WebSphere V5.0 Security - CGISecurity

Assigning method permissions in the Application
Assembly Tool
To set up these method permissions using the Application Assembly Tool, do the
following:
1. Open the EJB Modules folder for your application open the desired module
under it, itsobankEJB in our case, then finally select Method Permissions.
2. If no method permissions have previously been defined for EJBs, the box on
the right will be empty. Right-click the space under Name, and you will see a
pop-up menu. Select New to create a new set of method permissions.
3. In the New Method Permission dialog box, you may enter a Method
permission name and Description, although these are optional.
4. To add methods, click the first Add... button and you will see the Add Methods
dialog box. By opening the folders, you can see all methods in all the
applications’ EJBs. To select multiple methods, hold down the Ctrl key as you
select methods. All EJB methods of a given type, or all methods for a given
EJB, can be selected by selecting the parent folders as shown in Figure 5-2.
5. Click OK when done.
Figure 5-2 Add Methods window
6. To assign the selected methods to a security role, click the Add... button next
to the Role Name list. You will see a list of all security roles that have been
Chapter 5. Securing EJBs 77