IBM WebSphere V5.0 Security - CGISecurity

Table 10-8 Administrative rolesRoleMonitor roleOperator roleConfigurator roleAdministrator roleActivityView configuration information and statusTrigger runtime state changes, such as starting or stoppingan application serverModify configuration information but unable to changeruntime stateOperator as well as ConfiguratorMost of the MBeans existing in WebSphere deal with runtime operations andruntime attributes and only require Monitor, Operator or Administrator role. Veryfew MBeans deal with configuration and would require the Monitor, Administratorand Configurator role.Every method of MBean is categorized into one of four types: INFO (read onlylike), ACTION (read and write), ACTION_INFO (read and write), and UNKNOWN(unknown nature).Table 10-9 MBean method categoriesCategoryINFOACTIONACTION_INFOUNKNOWNOperationRead onlyread and writeread and writeof unknown natureThe MBean deployment descriptor XML file is very similar to the EJB deploymentdescriptor even though it does not support features of EJB 2.0 such as theunchecked method, excluded list , and run-as element. Run-as is not supportedbecause administrative security is used to protect sensitive system resources; italso requires more privileges.10.15 Cell SecurityThe Cell Security name refers to the scenario where security is enabled for amulti-server environment. In this environment, WebSphere Application Serversare integrated into a Cell using the WebSphere Network Deployment (ND)package.Chapter 10. Administering WebSphere security 337