Novell Access Manager 3.1 SP 2, Руководство пользователя, Страница: 92 / 126

92 Novell Access Manager 3.1 SP2 J2EE Agent Guide
n
ov
do
cx (e
n)
16
Ap
ril 20
10
9 Continue with Section 6.2.2, “Assigning a Web Authorization Policy to the Resource,” on
page 92 .
Until you have assigned an Authorization policy to the resource, which restricts access to this
resource, all authenticated users have access to the resource.
6.2.2 Assigning a Web Authorization Policy to the Resource
The following instructions assume that you have already created your Authorization policy for the
Web resource. For general information about Authorization policies, and for information about
creating a Web Authorization policy, .
To assign an Authorization policy:
1 In the Administration Console, click Devices > J2EE Agents > Edit > Manage authorization
policies > [Name of Web Module] > [Name of Protected Resource] > Authorization Policy .
2 To enable a policy, select a policy in the list, then click Enable .
If no policies appear in the list, you haven’t created any. Click Manage Policies . For
configuration information, .
3 Click Configuration Panel > OK
4 On the Configuration page, click OK , then click Update > OK .
6.3 Protecting Enterprise JavaBeans Resources
Because you can define multiple protected resources for each JavaBean, you can create one policy
that protects the module and another policy that protects specific interfaces or methods. For
example, you can create two protected resources and two policies for an EJB. The first resource and
policy combination grants general access to the EJB to all the users that meet the criteria in the
Authorization policy. If the EJB contains areas that only a few users should access, then you create a
second protected resource and policy combination that restricts access to these resources to these
users. The following sections explain this process:
Š
Section 6.3.1, “Creating a Protected Enterprise JavaBean Resource,” on page 92
Š
Section 6.3.2, “Assigning an Enterprise JavaBeans Authorization Policy to a Resource,” on
page 94
6.3.1 Creating a Protected Enterprise JavaBean Resource
1
In the Administration Console, click Devices > J2EE Agents > Edit > Manage authorization
policies .
2 Click New and supply the following information:
Module File Name: The filename of the EJB. Specify the name of the EJB module you are
protecting, including the file extension (
.jar
for an EJB Module).
Type: The type of the application. Select EJB Module for an EJB module.
3 Click OK .
4 To add a protected resource to the list, click New , specify a display name for the EJB resource,
then click OK .