Novell Access Manager 3.1 SP 2, Руководство пользователя, Страница: 105 / 126

Deploying the Sample Payroll Application 105
n
ov
do
cx (e
n)
16
Ap
ril 20
10
7.4.3 Assigning Policies to Protected Resources
After creating the Authorization policies, you need to create protected resources for the payroll
application, then assign the policies to the protected resources.
Š
“Assigning the Authorization Policies to Protected Web Resources” on page 105
Š
“Assigning the Authorization Policies to Protected EJB Resources” on page 106
Assigning the Authorization Policies to Protected Web Resources
To allow the J2EE Agent to enforce authorization for the payroll Web module, you need to create
three protected resources for the payroll application.
1 Click Devices > J2EE Agents > Edit .
2 In the Access Control Configuration section, deselect Enforce application server policy , select
Enforce additional authorization policy , then click Manage authorization policies .
3 Click New , specify the name of the payroll
.war
file (
PayrollWeb.war
), select Web Module as
the Type , then click OK .
4
Click New to create the required protected resources.
5 Select all three protected resources.
The
manager protected resource has
/manager/*
as its URL path and enables the
PayrollWebManager Authorization policy. This policy allows only managers to access the
manager pages. Everyone else is denied access.
The
myinfo protected resource has
/myInformation.jsp
and
/payserv
as its URL paths.
Both the PayrollWebEmployee and PayrollWebManager Authorization policies are enabled for
this resource. This allows both employees and managers to view their own information pages.
The
public protected resource uses
/*
for its URL path and is not assigned an Authorization
policy. This allows everyone who can log in to the Identity Server to have access to the public
pages of the application.
6
To save your changes, click Configuration Panel , then click OK .
7 On the J2EE Agents page, click Update .