IBM WebSphere V5.0 Security - CGISecurity

Figure 10-4 Mapping a group to an Administrative role10.3.1 CosNaming rolesThe J2EE role-based authorization concept has been extended to protect theWebSphere CosNaming service. CosNaming security offers increasedgranularity of security control over CosNaming functions, which affect the contentof the WebSphere Name Space. There are generally two ways in which clientprograms will make a CosNaming call. The first is through the JNDI interfaces.The second is CORBA clients invoking CosNaming methods directly. Four rolesare defined.Table 10-2 CosNaming rolesRoleCos Naming ReadCos Naming WriteDescriptionUsers who have been assigned theCosNamingRead role will be allowed toperform queries of the WebSphere NameSpace, such as through the JNDI lookupmethod. The special subject Everyone isthe default policy for this role.Users who have been assigned theCosNamingWrite role will be allowed toperform write operations such as JNDIbind, rebind, or unbind, plusCosNamingRead operations. Thespecial-subject, AllAuthenticated, is thedefault policy for this role.242 IBM WebSphere V5.0 Security Handbook