Novell Access Manager 3.1 SP 2, Руководство пользователя, Страница: 106 / 126

106 Novell Access Manager 3.1 SP2 J2EE Agent Guide
n
ov
do
cx (e
n)
16
Ap
ril 20
10
Assigning the Authorization Policies to Protected EJB Resources
To allow the J2EE Agent to enforce authorization for the payroll EJB module, you need to create
policies for four EJBs.
1 Click Devices > J2EE Agents > Edit .
2
In the Access Control Configuration section, deselect Enforce application server policy , select
Enforce additional authorization policy , then click Manage authorization policies .
3 Click New , specify the name of the payroll
.jar
file (
PayrollEJB.jar
), select EJB Module as
the Type , then click OK .
4 Click New to create the required EJB modules for this application.
5 Select all four EJB modules.
The
[All] EJB is not assigned an Authorization policy. This allows everyone who can log in to
the Identity Server to have access to the public EJBs of the application.
The
EmployeeEJB enables the PayrollEJBManager Authorization policy. This policy allows
only managers to change sensitive employee information, such as an employee’s salary.
The
EmployeeSessionEJB enables both the PayrollEJBEmployee and PayrollEJBManager
Authorization policies for this resource. This allows both employees and managers to view
their own employee information.
The
ManagerSessionEJB enables the PayrollEJBManager Authorization policy. This policy
allows only managers to manage employee information. Everyone else is denied access.
6 To save your changes, click Configuration Panel , then click OK .
7 On the J2EE Agents page, click Update .
7.4.4 Testing the Configuration
1 Deploy the sample payroll application on your J2EE server.