IBM WebSphere V5.0 Security - CGISecurity

5.5.2 Method level delegationIn addition to the bean-level delegation policy defined by the EJB 2.0specification and described above, the WebSphere Application Server providesthe capability to perform method-level EJB delegation. This works in the sameway as bean-level delegation, but can be applied to specific EJB methods, ratherthan to the bean as a whole. This finer degree of delegation granularity allowsapplication assemblers to delegate different methods of the same EJB todifferent security roles.In addition, method-level delegation provides an additional delegation option: runas server. This option indicates that the method should make calls to other EJBsusing the identity of the application server itself.Method-level delegation policies are defined in the ibm-ejb-jar-ext.xmi file. Thefollowing example shows the XML code for an onMessage() method which isdelegated to run as the application server.Example 5-6 Method-level run as serverThe following example shows the XML code for an onMessage() method which isdelegated to run as a member of the mdbuser security role.Example 5-7 Method-level run as role88 IBM WebSphere V5.0 Security Handbook