Novell Access Manager 3.1 SP 2, Руководство пользователя, Страница: 100 / 126

100 Novell Access Manager 3.1 SP2 J2EE Agent Guide
n
ov
do
cx (e
n)
16
Ap
ril 20
10
6
To save your Role policy, click OK > Apply Changes .
7 Activate the Role policy for your Identity Server cluster configuration. Click Identity Servers >
Edit > Roles.
8 Select the name of your Role policy, click Enable , then click OK .
9 Click Identity Servers > Update to update the Identity Server.
10 Continue with Section 7.4.2, “Creating Authorization Policies,” on page 100 .
7.4.2 Creating Authorization Policies
The payroll application is a
.ear
file that contains both an EJB module and a Web (
.war
) module.
Each module type requires its own type of Authorization policies, and to fully protect the
application, you must create the following policies:
Š
“Creating EJB Authorization Policies” on page 100
Š “Creating Web Authorization Policies” on page 102
Creating EJB Authorization Policies
You need to create two policies: one that permits Managers to access EJB resources and one that
permits Employees to access EJB resources.
1 In the Administration Console, click Devices > Policies .
2
To create an Authorization policy for the employees, click New , specify a name for the policy,
select J2EE Agent: EJB Authorization as the type, then click OK .
3 For the first rule, click New , set up a condition that permits access if the user has been assigned
the Employee role, then click OK . Your rule should look similar to the following: