IBM WebSphere V5.0 Security - CGISecurity

defined in the EJB module. For information about adding security roles, see
“Defining security roles in the Application Assembly Tool” on page 28.
7. Select the manager security role and click OK. Now, the New Method
Permissions window will appear as in Figure 5-3, and the resulting
deployment descriptor will contain the XML code shown in Example 5-1 on
page 76.
Figure 5-3 New Methods Permission dialog box
Assigning method permissions in WebSphere Studio
To set up these method permissions using WebSphere Studio, do the following:
1. From the Resource Perspective, navigate to the EJB deployment descriptor
file, ebj-jar.xml, and double-click this file.
2. Click the Assembly Descriptor tab to see the method permissions.
3. If no security roles have been defined for EJBs, click the Add... button below
the Security Roles box, to see the Add Security Role dialog box. Enter a
Name and (optionally) a Description and then click Finish. Repeat to add all
necessary security roles to the EJB module.
4. Click the Add... button below the Method Permissions box to see the Add
Method Permissions dialog. Select one or more security roles, as shown in
Figure 5-4.
78 IBM WebSphere V5.0 Security Handbook