"J2EE Application Security Model"
Vol. 6, Issue 8, p. 36

	


Listing 1

<form method="POST" action="j_security_check">
                 <input type="text" name="j_username">
                 <input type="password" name="j_password">
</form>



Listing 2

  Properties    props = new Properties () ;
  props.put ( Context.SECURITY_PRINCIPAL,       theUserLogin ) ;
  props.put ( Context.SECURITY_CREDENTIALS,     thePassword ) ;
  IntialContext  ic = new InitialContext ( props ) ;
// proceed with lookup  using  above  InitialContext  ic ...



Listing 3

<method-permission>
  <role-name>customer</role-name>
    <method>
        <ejb-name>CustomerServicesEJB</ejb-name>
        <method-name>*</method-name>
   </method>
</method-permission>


Listing 4

<method-permission>
   <role-name>customer</role-name>
   <method>
        <ejb-name>CustomerServicesEJB</ejb-name>
        <method-name>placeOrder</method-name>
   </method>
</method-permission>