Getting Started with WebSphere Application Server

146 Getting Started with WebSphere Application Server Community Edition
Figure 8.1 - Community Edition security: The big picture
Use the following steps to secure a Java EE application in Community Edition:
1. Configure the security realm in the Administrative Console.
2. Define the role mapping in Geronimo deployment plan.
3. Restrict roles to access Java EE resources either by annotations or by Java EE deployment
descriptors
Each of these steps is discussed in more detail in the next sections. Not shown in the figure is the use of
trusted contexts to protect your data and improve performance on three-tier applications. This is
discussed in section 8.5
8.2 Configuring the security realm
Security realms can be defined as standalone or as part of an individual application. In Community
Edition, you can configure the Security Realm from the Administrative Console following steps below:
1. Start Community Edition, open the Administrative Console and go to the Security Realms portlet.
Then click Add new security realm.
2. Type the realm name you want, such as helloRealm and for the Realm Type select Properties File
Realm as illustrated in Figure 8.2. Then click Next.