Allowed Roles : Security « EJB3 « Java Tutorial

1. Java Tutorial
2. EJB3
3. Security

File: Customer.java

import javax.persistence.Entity;
import javax.persistence.EntityListeners;
import javax.persistence.Id;
import javax.persistence.PostRemove;

@Entity
public class Customer implements java.io.Serializable {
  private String firstName;

  private String lastName;
  @Id
  private long ssn;

  public String getFirstName() {
    return firstName;
  }

  public void setFirstName(String firstName) {
    this.firstName = firstName;
  }


  public String getLastName() {
    return lastName;
  }

  public void setLastName(String lastName) {
    this.lastName = lastName;
  }


  public long getSsn() {
    return ssn;
  }

  public void setSsn(long ssn) {
    this.ssn = ssn;
  }

}

File: EmployeeBean.java

import javax.annotation.security.RolesAllowed;
import javax.ejb.Stateless;
import javax.persistence.EntityManager;
import javax.persistence.PersistenceContext;

@Stateless
@RolesAllowed("AUTHORIZED_MERCHANT")
public class EmployeeBean implements EmployeeServiceLocal, EmployeeServiceRemote {
  @PersistenceContext(unitName="EmployeeService") private EntityManager manager;

  public void doAction(){

    Customer cust = new Customer();

    cust.setLastName("Bond");
    cust.setSsn(1L);
    manager.persist(cust);
    
    System.out.println("Saved");
    
    cust = manager.find(Customer.class,1L);
    System.out.println(cust.getLastName());
    
    cust.setLastName("new name");
    
    manager.persist(cust);
    
    cust = manager.find(Customer.class,1L);
    System.out.println(cust.getLastName());
    
    manager.remove(cust);
    
    
    
  }
}

File: EmployeeServiceLocal.java

import javax.ejb.Local;
import javax.jws.WebParam;

@Local
public interface EmployeeServiceLocal {
  public void doAction();


}

File: EmployeeServiceRemote.java

import javax.ejb.Remote;


@Remote
public interface EmployeeServiceRemote {
  public void doAction();
}

File: jndi.properties

java.naming.factory.initial=org.jnp.interfaces.NamingContextFactory
java.naming.factory.url.pkgs=org.jboss.naming:org.jnp.interfaces
java.naming.provider.url=localhost:1099

File: Main.java

import javax.ejb.EJB;
import javax.naming.InitialContext;


public class Main {

  public static void main(String[] a) throws Exception {

    EmployeeServiceRemote service = null;

    // Context compEnv = (Context) new InitialContext().lookup("java:comp/env");

    // service = (HelloService)new
    // InitialContext().lookup("java:comp/env/ejb/HelloService");
    service = (EmployeeServiceRemote) new InitialContext().lookup("EmployeeBean/remote");


    service.doAction();
    


  }

}

File: roles-java2s.properties

user1=AUTHORIZED_MERCHANT
user2=UNAUTHORIZED_MERCHANT

File: users-java2s.properties

user1=password
user2=password

27.23.Security
	27.23.1.	Permit All Users
	27.23.2.	JBoss Security Domain
	27.23.3.	Allowed Roles