IBM WebSphere V5.0 Security - CGISecurity

Figure 5-4 Choosing security roles
5. Click Next... to see the list of EJBs. Select one or more EJBs from the list.
6. Click Next... to see the list of methods. Select one or more methods, using
the wildcards (*) if desired to include all methods of a given type or all
methods for a given EJB.
7. Click Finish when done.
Assigning roles to unprotected methods
During application installation, the WebSphere Administrative Console allows
you to specify what method permissions are applied to session and entity EJB
methods that are not explicitly secured in the deployment descriptor. If all session
and entity EJB methods are protected, this step is omitted.
Note: When assigning roles to EJB methods, methods can be specified using
several types of wildcards to select all home methods, local methods, local
home methods, remote methods, and so on. When installing an EJB
containing methods that are protected using one method-type wildcard (for
example, the home methods wildcard) but whose other methods are
unprotected, the WebSphere Application Server does not prompt for how
unprotected methods are to be secured. Instead, they are deselected.
Chapter 5. Securing EJBs 79