IBM WebSphere V5.0 Security - CGISecurity

html::index1html::customertransfer2Servlet::Transfer3Bean::TransferHelper6JSP::transferresults4Stateless Session EJB::Transfer5a5bEntity EJB::BranchAccountEntity EJB::CustomerAccountFigure A-2 Customer transfer processThe process flows as described below:1. User selects the customer transfer link on the main page (index.html) of theapplication.2. After filling out the details on the transfer form, the user submits the transfer tothe Transfer servlet.3. The Transfer servlet is the controller between the presentation and thebusiness logic represented by enterprise Java beans (EJB). The servletprocesses the request. You will find multiple functions and featuresimplemented in this simple servlet; these functions will be executed accordingto the request. You can find more information about these functions in thebook where specific security features are discussed and you will find areference to the source in the code.4. The servlet uses a singleton helper class (TransferHelper) to look up andstore the reference to the Transfer session EJB. The Transfer EJB is astateless session EJB, it implements the business processes and handles thetransfer between the accounts. It follows the facade pattern, and hides thetransfer logic between multiple entity EJBs.Appendix A. Sample application 447