role-name run-as security-identity ejb-jar.xml Deployment Descriptors

Securing Enterprise JavaBeans EJBs 6-7

6.3.1.2.1 Used Within The method-permission element is used within the

assembly-descriptor element.

6.3.1.2.2 Example For an example of how to use the method-permission element,

see Example 6–1 .

6.3.1.3 role-name

The role-name element contains the name of a security role. The name must conform to the lexical rules for an NMTOKEN.

6.3.1.3.1 Used Within The role-name element is used within the method-permission,

run-as, security-role, and security-role-ref elements.

6.3.1.3.2 Example For an example of how to use the role-name element, see

Example 6–1 .

6.3.1.4 run-as

The run-as element specifies the run-as identity to be used for the execution of the enterprise bean. It contains an optional description, and the name of a security role.

6.3.1.4.1 Used Within The run-as element is used within the security-identity

element.

6.3.1.4.2 Example For an example of how to use the run-as element, see

Example 6–8 .

6.3.1.5 security-identity

The security-identity element specifies whether the callers security identity is to be used for the execution of the methods of the enterprise bean or whether a specific run-as identity is to be used. It contains an optional description and a specification of the security identity to be used. The following table describes the elements you can define within an security-identity element.

6.3.1.5.1 Used Within The security-identity element is used within the entity,

message-driven, and session elements. Table 6–3 security-identity Element Element Required Optional Description description Optional A text description of the security identity. use-caller-identity or run-as Required The use-caller-identity element or the run-as element must be specified. The use-caller-identity element specifies that the callers security identity be used as the security identity for the execution of the enterprise beans methods. The run-as element specifies the run-as identity to be used for the execution of the enterprise bean. It contains an optional description, and the name of a security role. 6-8 Programming Security for Oracle WebLogic Server

6.3.1.5.2 Example For an example of how to use the security-identity element,

see Example 6–3 and Example 6–8 .

6.3.1.6 security-role