Application Services and Security

Since you will use the Campaign Manager for WebLogic, WebLogic Commerce Server, and WebLogic Personalization Server application services as a starting point for developing your own applications, this topic describes the contents of these deployment descriptors for each JAR in the included wlcsApp enterprise application. Therefore, this topic includes the following sections:

Notes: The JAR files containing the ejb-jar.xml and weblogic-ejb-jar.xml deployment descriptors that are described in this chapter can be found in the $WL_COMMERCE_HOME/WebLogicCommerce3.5/config/wlcsDomain/
wlcsApp subdirectory, where $WL_COMMERCE_HOME is the directory where you installed the product.

action.jar

The action.jar file contains an EJB that provides the executable actions for the campaign server (that is, the mail action, the ads action, and the offer discount action).

Enterprise Bean Definitions

Table 3-1 action.jar ejb-jar.xml EJB Definition

Assembly Descriptor

Listing 3-1 Assembly Descriptor Element for the ActionService JavaBean

<assembly descriptor>

   <security-role> 
	<description>Anonymous Users</description> 
       <role-name>AnonymousRole</role-name> 
   </security-role> 

   <method-permission> 

	<role-name>AnonymousRole</role-name> 

       <method> 
          <ejb-name>ActionService</ejb-name>
          <method-intf>Home</method-intf> 
          <method-name>*</method-name> 
       </method> 

   </method-permission> 

...

</assembly-descriptor> 

In this case, the assembly descriptor specifies that users within the security role AnonymousRole will be granted access to all of the methods in the ActionService JavaBean's Home interface.

Security-Role Assignments

Listing 3-2 Security Role Assignments for the ActionService JavaBean

<security-role-assignment> 

   <role-name>AnonymousRole</role-name>
   <principal-name>everyone</principal-name>

</security-role-assignment> 

axiom.jar

Enterprise Bean Definitions

Table 3-2 axiom.jar ejb-jar.xml EJB Definitions

Security-Role References

Listing 3-3 Security-Role References in the User and UserManager JavaBeans

<security-role-ref>

   <description>This ref declares the Administrative role for this 
   bean</description>

   <role-name>AdministrativeRole</role-name>
   <role-link>AdministrativeRole</role-link>

</security-role-ref>

Assembly Descriptor

Listing 3-4 Assembly Descriptor Element for the Axiom JavaBeans

<assembly descriptor>

   <security-role>
      <description>Administrators</description>
      <role-name>AdministrativeRole</role-name>
   </security-role>

   <security-role>
      <description>Anonymous Users</description>
      <role-name>AnonymousRole</role-name>
   </security-role>

   <method-permission>

      <role-name>AnonymousRole</role-name>

      <method>     		
	  <ejb-name>com.beasys.commerce.axiom.contact.
	  UserManager</ejb-name>
	  <method-intf>Home</method-intf>
	  <method-name>*</method-name>
      </method>

      <method>      
	  <ejb-name>com.beasys.commerce.axiom.contact.
	  UserManager</ejb-name>
         <method-intf>Remote</method-intf>
         <method-name>*</method-name>
      </method>

      <method>      		
	  <ejb-name>com.beasys.commerce.axiom.contact.
	  RealmConfiguration</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
	  <ejb-name>com.beasys.commerce.axiom.contact.
	  RealmConfiguration</ejb-name>
         <method-intf>Remote</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.axiom.contact.
	  UnifiedProfileTypeManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
	  <ejb-name>com.beasys.commerce.axiom.contact.
	  UnifiedProfileTypeManager</ejb-name>
         <method-intf>Remote</method-intf>
         <method-name>*</method-name>
      </method>

    </method-permission>

...

</assembly-descriptor> 

In this case, the assembly descriptor first specifies two security roles, AdministrativeRole and AnonymousRole. The assembly descriptor then specifies the individual method permissions for the three stateless session JavaBeans in the axiom.jar file (UserManager, RealmConfiguration, and UnifiedProfileTypeManager) according to the AnonymousRole. Thus, users within the security role AnonymousRole will be granted access to all of the methods in the UserManager, RealmConfiguration, and UnifiedProfileTypeManager JavaBeans' Home interfaces, as well as all of the methods of their Remote interfaces. The AdministrativeRole is not used.

Security-Role Assignments

Listing 3-5 Security Role Assignments for the Axiom JavaBeans

  <security-role-assignment>

    <role-name>AdministrativeRole</role-name>
    <principal-name>admin</principal-name>

  </security-role-assignment>

  <security-role-assignment>

    <role-name>AnonymousRole</role-name>
    <principal-name>everyone</principal-name>

  </security-role-assignment>

bridge.jar

Enterprise Bean Definitions

Table 3-3 bridge.jar ejb-jar.xml EJB Definition

Assembly Descriptor

Listing 3-6 Assembly Descriptor Element for the LDAPConfiguration JavaBean

<assembly descriptor>

      <security-role>
         <description>Anonymous Users</description>
         <role-name>AnonymousRole</role-name>
      </security-role>

      <method-permission>

         <role-name>AnonymousRole</role-name>

         <method>     		
	     <ejb-name>com.beasys.commerce.bridge.ldap.
   	     LDAPConfiguration</ejb-name>
   	     <method-intf>Home</method-intf>
	     <method-name>*</method-name>
         </method>

      </method-permission>

   ...

</assembly descriptor>

In this case, the assembly descriptor specifies that users within the security role AnonymousRole will be granted access to all of the methods in the LDAPConfiguration JavaBean's Home interface.

Security-Role Assignments

Listing 3-7 Security Role Assignments for the LDAPConfiguration JavaBean

<security-role-assignment> 

   <role-name>AnonymousRole</role-name>
   <principal-name>everyone</principal-name>

</security-role-assignment> 

campaign.jar

The campaign.jar file is a collection of EJBs that provide the campaign and scenario services and repositories.

Enterprise Bean Definitions

Table 3-4 campaign.jar ejb-jar.xml EJB Definitions

Assembly Descriptor

Listing 3-8 Assembly Descriptor Element for the Campaign JavaBeans

<assembly-descriptor>

      <security-role>
         <description>Anonymous Users</description>
         <role-name>AnonymousRole</role-name>
      </security-role>

      <security-role>
         <description>Administrative Users</description>
         <role-name>AdminRole</role-name>
      </security-role>

      <!-- Permissions for the AnonymousRole -->

      <method-permission>

         <role-name>AnonymousRole</role-name>

         <method>
            <ejb-name>com.bea.commerce.campaign.
  	     ScenarioService</ejb-name>
            <method-intf>Home</method-intf>
            <method-name>*</method-name>
         </method>

         <method>
            <ejb-name>com.bea.commerce.campaign.
 	     ScenarioService</ejb-name>
            <method-intf>Remote</method-intf>
            <method-name>*</method-name>
         </method>

        <method>
           <ejb-name>com.bea.commerce.campaign.
	    CampaignService</ejb-name>
           <method-intf>Home</method-intf>
           <method-name>*</method-name>
        </method>

        <method>
           <ejb-name>com.bea.commerce.campaign.
	    CampaignService</ejb-name>
           <method-intf>Remote</method-intf>
           <method-name>*</method-name>
        </method>

        <method>
           <ejb-name>com.bea.commerce.campaign.
	    CampaignRepository</ejb-name>
           <method-intf>Home</method-intf>
           <method-name>*</method-name>
        </method>

        <method>
           <ejb-name>com.bea.commerce.campaign.
	   CampaignRepository</ejb-name>
          <method-intf>Remote</method-intf>
          <method-name>getCampaignService</method-name>
        </method>

    </method-permission>

    <!-- Permissions for the AdminRole -->

    <method-permission>

        <role-name>AdminRole</role-name>

        <method>
           <ejb-name>com.bea.commerce.campaign.
	    ScenarioService</ejb-name>
           <method-intf>Home</method-intf>
           <method-name>*</method-name>
        </method>

        <method>     
	    <ejb-name>com.bea.commerce.campaign.
	    ScenarioService</ejb-name>
           <method-intf>Remote</method-intf>
           <method-name>*</method-name>
        </method>

        <method>
           <ejb-name>com.bea.commerce.campaign.
  	    ScenarioRepository</ejb-name>
          <method-intf>Home</method-intf>
          <method-name>*</method-name>
        </method>

        <method>
           <ejb-name>com.bea.commerce.campaign.
	    ScenarioRepository</ejb-name>
           <method-intf>Remote</method-intf>
           <method-name>*</method-name>
        </method>

        <method>
           <ejb-name>com.bea.commerce.campaign.
	    CampaignService</ejb-name>
           <method-intf>Home</method-intf>
           <method-name>*</method-name>
        </method>

        <method>
           <ejb-name>com.bea.commerce.campaign.
	    CampaignService</ejb-name>
           <method-intf>Remote</method-intf>
           <method-name>*</method-name>
        </method>

        <method>
           <ejb-name>com.bea.commerce.campaign.
	    CampaignRepository</ejb-name>
           <method-intf>Home</method-intf>
           <method-name>*</method-name>
        </method>

        <method>   
	    <ejb-name>com.bea.commerce.campaign.
	    CampaignRepository</ejb-name>
           <method-intf>Remote</method-intf>
           <method-name>*</method-name>
        </method>

    </method-permission>

  ...

</assembly-descriptor>

In this case, the assembly descriptor specifies that users within the security role AnonymousRole will be granted access to all the methods in the Home and Remote interfaces for the ScenarioService and CampaignService JavaBeans, plus all methods on the Home interface of the CampaignRepository JavaBean. In addition, users in the AnonymousRole will be granted access to the getCampaignService method on the Remote interface of the CampaignRepository JavaBean. Users within the security role AdminRole will be granted access to all methods in the Home and Remote interfaces for all the JavaBeans.

Security-Role Assignments

Listing 3-9 Security Role Assignments for the Campaign JavaBeans

<security-role-assignment> 

   <role-name>AnonymousRole</role-name>
   <principal-name>everyone</principal-name>

</security-role-assignment> 

<security-role-assignment>

    <role-name>AdminRole</role-name>
    <principal-name>admin</principal-name>
    <principal-name>system</principal-name>

</security-role-assignment>

discount.jar

Enterprise Bean Definitions

Table 3-5 discount.jar ejb-jar.xml EJB Definitions

Assembly Descriptor

Listing 3-10 Assembly Descriptor Element for the Discount JavaBeans

<assembly-descriptor>

      <security-role>
         <description>Anonymous Users</description>
         <role-name>AnonymousRole</role-name>

      </security-role>

      <method-permission>

         <role-name>AnonymousRole</role-name>

         <method>
           <ejb-name>DiscountManagement</ejb-name>
           <method-intf>Home</method-intf>
           <method-name>*</method-name>
         </method>

         <method>
           <ejb-name>DiscountManagement</ejb-name>
           <method-name>*</method-name>
         </method>

         <method>
            <ejb-name>DiscountAssociationMgr</ejb-name>
            <method-intf>Home</method-intf>
            <method-name>*</method-name>
         </method>

         <method>
            <ejb-name>DiscountAssociationMgr</ejb-name>
            <method-name>*</method-name>
         </method>

      </method-permission>

   ...

</assembly-descriptor>

Note: The <method> tag without a <method-intf> specifies the <method-name> on both the Home and Remote interfaces.

In this case, the assembly descriptor specifies that users within the security role AnonymousRole will be granted access to all the methods in the Home and Remote interfaces for the DiscountManagement and DiscountAssociationMgr JavaBeans.

Security-Role Assignments

Listing 3-11 Security Role Assignments for the Discount JavaBeans

<security-role-assignment> 

   <role-name>AnonymousRole</role-name>
   <principal-name>everyone</principal-name>

</security-role-assignment> 

document.jar

The document.jar file is a collection of EJBs that provide the document management services (searching, retrieval, and schemas).

Enterprise Bean Definitions

Table 3-6 document.jar ejb-jar.xml EJB Definitions

Assembly Descriptor

Listing 3-12 Assembly Descriptor Element for the Document JavaBeans

<assembly-descriptor>

   <security-role> 
	<description>Anonymous Users</description> 
       <role-name>AnonymousRole</role-name> 
   </security-role> 

   <method-permission> 

	<role-name>AnonymousRole</role-name> 

       <method> 
          <ejb-name>com.beasys.commerce.axiom.document.Document
	   </ejb-name>
          <method-intf>Home</method-intf> 
          <method-name>*</method-name> 
       </method> 

       <method> 
          <ejb-name>com.beasys.commerce.axiom.document.Document
	   </ejb-name>
          <method-intf>Remote</method-intf> 
          <method-name>*</method-name> 
       </method> 

       <method> 
          <ejb-name>com.beasys.commerce.axiom.document.
	   DocumentSchema</ejb-name>
          <method-intf>Home</method-intf> 
          <method-name>*</method-name> 
       </method> 

       <method> 
          <ejb-name>com.beasys.commerce.axiom.document.
	   DocumentSchema</ejb-name>
          <method-intf>Remote</method-intf> 
          <method-name>*</method-name> 
       </method> 

       <method> 
          <ejb-name>com.beasys.commerce.axiom.document.
	   DocumentManager</ejb-name>
          <method-intf>Home</method-intf> 
          <method-name>*</method-name> 
       </method> 

       <method> 
          <ejb-name>com.beasys.commerce.axiom.document.
	   DocumentManager</ejb-name>
          <method-intf>Remote</method-intf> 
          <method-name>*</method-name> 
       </method> 

   </method-permission> 

  ...

</assembly-descriptor> 

In this case, the assembly descriptor specifies that users within the security role AnonymousRole will be granted access to all the methods in the Home and Remote interfaces for each of the Document JavaBeans.

Security-Role Assignments

Listing 3-13 Security Role Assignments for the Document JavaBeans

<security-role-assignment> 

   <role-name>AnonymousRole</role-name>
   <principal-name>everyone</principal-name>

</security-role-assignment> 

ebusiness.jar

Enterprise Bean Definitions

Table 3-7 ebusiness.jar ejb-jar.xml EJB Definitions

Security-Role References

Note: In the TaxwareTaxCalculator JavaBean's security-role reference, the <description> subelement incorrectly reads AdministrativeRole instead of AnonymousRole. However, because the description is essentially a comment, the server is not affected by it.

Assembly Descriptor

Listing 3-18 Assembly Descriptor Element for the E-business JavaBeans

<assembly-descriptor>

      <security-role>
	  <description>Registered customers</description>
	  <role-name>CustomerRole</role-name>
      </security-role>

      <security-role>
         <description>Administrators</description>
         <role-name>AdministrativeRole</role-name>
      </security-role>

      <security-role>
         <description>Anonymous Users</description>
         <role-name>AnonymousRole</role-name>
      </security-role>

    <method-permission>

       <role-name>AnonymousRole</role-name>

	<!-- com.beasys.commerce.ebusiness.catalog.CatalogManager 	
	-->

       <method>
          <ejb-name>com.beasys.commerce.ebusiness.catalog.
	   CatalogManager</ejb-name>
          <method-name>getCategoryManager</method-name>
       </method>

      <method>
	   <ejb-name>com.beasys.commerce.ebusiness.catalog.
	   CatalogManager</ejb-name>
          <method-name>getProductItemManager</method-name>
      </method>

      <method>
	  <ejb-name>com.beasys.commerce.ebusiness.catalog.
	  CatalogManager</ejb-name>
        <method-name>getCatalogQueryManager</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.
	  CatalogManager</ejb-name>
         <method-name>getCustomDataManager</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.
	  CatalogManager</ejb-name>
         <method-name>createCatalogRequest</method-name>
      </method>

      <method>
  	  <ejb-name>com.beasys.commerce.ebusiness.catalog.
	  CatalogManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.category.
	CategoryManager  -->

      <method>        	
	  <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getCatalogManager</method-name>
      </method>      

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getItems</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getItemKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getParent</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getAncestors</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getRootCategory</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getCategoryCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getSubCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getSubCategoryKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getSiblings</method-name>
      </method>

      <method>        	
	  <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getSiblingKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getCategoryKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getItemCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getSubCategoryCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getSiblingCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getCategory</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-name>getItemCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.item.
	ProductItemManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.ProductItemManager</ejb-name>
         <method-name>getCatalogManager</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.ProductItemManager</ejb-name>
         <method-name>getItemCount</method-name>
      </method>

      <method>
	  <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.ProductItemManager</ejb-name>
         <method-name>getKeywords</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.ProductItemManager</ejb-name>
         <method-name>getItemKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.ProductItemManager</ejb-name>
         <method-name>getItems</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.ProductItemManager</ejb-name>
         <method-name>getItem</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.ProductItemManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.item.
	JdbcProductItemManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.JdbcProductItemManager</ejb-name>
         <method-name>getCatalogManager</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.JdbcProductItemManager</ejb-name>
         <method-name>getItemCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.JdbcProductItemManager</ejb-name>
        <method-name>getKeywords</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.JdbcProductItemManager</ejb-name>
         <method-name>getItemKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.JdbcProductItemManager</ejb-name>
         <method-name>getItems</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.JdbcProductItemManager</ejb-name>
         <method-name>getItem</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.JdbcProductItemManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.data.
	CustomDataManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  data.CustomDataManager</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  data.CustomDataManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.query.
	CatalogQueryManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  query.CatalogQueryManager</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  query.CatalogQueryManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.data.
	EpmCustomDataManager -->

      <method>
	  <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  data.EpmCustomDataManager</ejb-name> 			
	  <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  data.EpmCustomDataManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.query.
	JdbcCatalogQueryManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  query.JdbcCatalogQueryManager</ejb-name> 		
	  <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  query.JdbcCatalogQueryManager</ejb-name>
        <method-intf>Home</method-intf>
        <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.category.
	JdbcCategoryManager  -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
   	   category.JdbcCategoryManager</ejb-name>
         <method-name>getCatalogManager</method-name>
      </method>      

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getItems</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
 	   category.JdbcCategoryManager</ejb-name>
         <method-name>getItemKeys</method-name>
      </method>

      <method>

        <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.JdbcCategoryManager</ejb-name>
        <method-name>getParent</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getAncestors</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getRootCategory</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
          <method-name>getCategoryCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getSubCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getSubCategoryKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getSiblings</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getSiblingKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getCategoryKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getItemCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getSubCategoryCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getSiblingCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getCategory</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getItemCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.JdbcCategoryManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <method>         		
	  <ejb-name>com.beasys.commerce.ebusiness.security.
 	   Encryptor</ejb-name>         
	  <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.tax.taxware.
	   TaxwareTaxCalculator</ejb-name>
	  <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.customer.
	   Customer</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>
          <ejb-name>com.beasys.commerce.ebusiness.shipping.
	    ShippingMethod</ejb-name>
          <method-name>*</method-name>
      </method>

      <method>
          <ejb-name>com.beasys.commerce.ebusiness.shoppingcart.
	    pipeline.RefreshSavedListPC</ejb-name>         		
	   <method-name>*</method-name>
      </method>

   </method-permission>

   <method-permission>

      <role-name>CustomerRole</role-name>

      <!-- com.beasys.commerce.ebusiness.catalog.
	CatalogManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.
	   CatalogManager</ejb-name>
         <method-name>getCategoryManager</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.
	   CatalogManager</ejb-name>
         <method-name>getProductItemManager</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.
	   CatalogManager</ejb-name>
         <method-name>getCatalogQueryManager</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.
	   CatalogManager</ejb-name>
         <method-name>getCustomDataManager</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.
	   CatalogManager</ejb-name>
         <method-name>createCatalogRequest</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.category.
	CategoryManager  -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getCatalogManager</method-name>      
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getItems</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getItemKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getParent</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getAncestors</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getRootCategory</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getCategoryCount</method-name>
      </method>

      <method>
        <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
        <method-name>getSubCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getSubCategoryKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getSiblings</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
        <method-name>getSiblingKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
        <method-name>getCategoryKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getItemCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
 	   category.CategoryManager</ejb-name>
         <method-name>getSubCategoryCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getSiblingCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getCategory</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.CategoryManager</ejb-name>
         <method-name>getItemCategories</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.item.
	ProductItemManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   item.ProductItemManager</ejb-name>
         <method-name>getCatalogManager</method-name>      
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
 	   item.ProductItemManager</ejb-name>
         <method-name>getItemCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   item.ProductItemManager</ejb-name>
         <method-name>getKeywords</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   item.ProductItemManager</ejb-name>
         <method-name>getItemKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   item.ProductItemManager</ejb-name>
         <method-name>getItems</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   item.ProductItemManager</ejb-name>
         <method-name>getItem</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.item.
	JdbcProductItemManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   item.JdbcProductItemManager</ejb-name>
         <method-name>getCatalogManager</method-name>      
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   item.JdbcProductItemManager</ejb-name>
         <method-name>getItemCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   item.JdbcProductItemManager</ejb-name>
         <method-name>getKeywords</method-name>
      </method>

      <method>
        <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  item.JdbcProductItemManager</ejb-name>
        <method-name>getItemKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   item.JdbcProductItemManager</ejb-name>
         <method-name>getItems</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   item.JdbcProductItemManager</ejb-name>
         <method-name>getItem</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.
	data.CustomDataManager -->

      <method>
	  <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   data.CustomDataManager</ejb-name>
         <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.
	query.CatalogQueryManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   query.CatalogQueryManager</ejb-name>   		
	  <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.data.
	EpmCustomDataManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   data.EpmCustomDataManager</ejb-name>
	   <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.
	query.JdbcCatalogQueryManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   query.JdbcCatalogQueryManager</ejb-name>
	  <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.
	category.JdbcCategoryManager  -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getCatalogManager</method-name> 
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getItems</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getItemKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getParent</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getAncestors</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getRootCategory</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getCategoryCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getSubCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getSubCategoryKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getSiblings</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getSiblingKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getCategoryKeys</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getItemCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getSubCategoryCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getSiblingCount</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getCategory</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   category.JdbcCategoryManager</ejb-name>
         <method-name>getItemCategories</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.security.
	   Decryptor</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.payment.
	   CreditCardService</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.payment.
	   PaymentTransaction</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>             
	  <ejb-name>com.beasys.commerce.ebusiness.shoppingcart.
	   pipeline.DeleteProductItemFromSavedListPC</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.shoppingcart.
	   pipeline.RefreshSavedListPC</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.shoppingcart.
	   pipeline.MoveProductItemToSavedListPC</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.shoppingcart.
	   pipeline.MoveProductItemToShoppingCartPC</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.order.
	   Order</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>
          <ejb-name>com.beasys.commerce.ebusiness.order.
	    OrderManager</ejb-name> 
          <method-intf>Home</method-intf>
          <method-name>*</method-name>
      </method>

   </method-permission>

   <method-permission>

      <role-name>AdministrativeRole</role-name>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.security.
	   Decryptor</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.payment.
	   CreditCardService</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.payment.
	   PaymentTransaction</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.order.
	   Order</ejb-name>
         <method-name>*</method-name>
      </method>

       <!-- com.beasys.commerce.ebusiness.catalog.CatalogManager
	-->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.
	   CatalogManager</ejb-name>
         <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.
	category.CategoryManager -->

      <method>

        <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  category.CategoryManager</ejb-name>
        <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.
	JdbcCategoryManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
 	   category.JdbcCategoryManager</ejb-name>
         <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.item.
	ProductItemManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   item.ProductItemManager</ejb-name>
         <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.item.
	JdbcProductItemManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
  	   item.JdbcProductItemManager</ejb-name>
         <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.
	data.CustomDataManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   data.CustomDataManager</ejb-name>
         <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.query.
	CatalogQueryManager -->

      <method>

        <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	  query.CatalogQueryManager</ejb-name>
        <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.data.
	EpmCustomDataManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   data.EpmCustomDataManager</ejb-name>
         <method-name>*</method-name>
      </method>

      <!-- com.beasys.commerce.ebusiness.catalog.service.query.
	JdbcCatalogQueryManager -->

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   query.JdbcCatalogQueryManager</ejb-name>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.order.
	   OrderManager</ejb-name> 
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

  </method-permission>

  ...

</assembly-descriptor>

Note: The <method> tag without a <method-intf> specifies the <method-name> on both the Home and Remote interfaces.

In this case, the assembly descriptor specifies that users in the AnonymousRole and CustomerRole can access the following methods in the com.beasys.commerce.ebusiness.catalog.CategoryManager JavaBean:

Note: Users in the AnonymousRole only can also access all methods for the Home interface of the CategoryManager JavaBean.

Users in the the AnonymousRole and CustomerRole can also access the following methods in the com.beasys.commerce.ebusiness.catalog.service.
category.CategoryManager and com.beasys.commerce.ebusiness.catalog.
service.category.JdbcCategoryManager JavaBeans:

Note: Users in the AnonymousRole only can also access all methods for the Home interface of the CategoryManager and JdbcCategoryManager JavaBeans.

Users in the AnonymousRole and CustomerRole can also access the following methods of the com.beasys.commerce.ebusiness.catalog.service.item.
ProductItemManager and com.beasys.commerce.ebusiness.catalog.
service.item.JdbcProductItemManager JavaBeans:

Note: Users in the AnonymousRole only can also access all methods for the Home interface of the ProductItemManager and JdbcProductItemManager JavaBeans.

Users in the AnonymousRole can also access all methods in the Home and Remote interfaces for the following JavaBeans:

Users in the CustomerRole can also access all methods in the Home and Remote interfaces for the following JavaBeans:

Lastly, users in the CustomerRole can access all Home methods for the com.beasys.commerce.ebusiness.order.OrderManager JavaBean.

For users in the AdministrativeRole, access to all methods in the Home and Remote interfaces is granted for each of the E-business JavaBeans, excluding com.beasys.commerce.ebusiness.order.OrderManager, to which users are only granted access to the methods in the Home interface.

Security-Role Assignments

Listing 3-19 Security Role Assignments for the E-business JavaBeans

<security-role-assignment> 

   <role-name>CustomerRole</role-name>
   <principal-name>wlcs_customer</principal-name>

</security-role-assignment> 

<security-role-assignment>

    <role-name>AdministrativeRole</role-name>
    <principal-name>admin</principal-name>

</security-role-assignment>

<security-role-assignment>

    <role-name>AnonymousRole</role-name>
    <principal-name>everyone</principal-name>

</security-role-assignment>

ejbadvisor.jar

Enterprise Bean Definitions

Table 3-8 ejbadvisor.jar ejb-jar.xml EJB Definition

Assembly Descriptor

Listing 3-20 Assembly Descriptor Element for the EjbAdvisor JavaBean

<assembly-descriptor>

   <security-role> 
	<description>Anonymous Users</description> 
       <role-name>AnonymousRole</role-name> 
   </security-role> 

   <method-permission> 

      <role-name>AnonymousRole</role-name>

      <method>
         <ejb-name>com.bea.commerce.platform.advisor.
	   EjbAdvisor</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

   </method-permission>

 ...

</assembly-descriptor>

In this case, the assembly descriptor specifies that users within the security role AnonymousRole will be granted access to all the methods in the EjbAdvisor JavaBean's Home interface.

Security-Role Assignments

Listing 3-21 Security Role Assignments for the EjbAdvisor JavaBean

<security-role-assignment> 

   <role-name>AnonymousRole</role-name>
   <principal-name>everyone</principal-name>

</security-role-assignment> 

events.jar

Enterprise Bean Definitions

Table 3-9 events.jar ejb-jar.xml EJB Definition

Assembly Descriptor

Listing 3-22 Assembly Descriptor Element for the EventService JavaBean

<assembly-descriptor>

   <security-role> 
	<description>Anonymous Users</description> 
       <role-name>AnonymousRole</role-name> 
   </security-role> 

   <method-permission> 

      <role-name>AnonymousRole</role-name>

      <method>
         <ejb-name>com.bea.commerce.platform.advisor.
	   EventService</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

   </method-permission>

 ...

</assembly-descriptor>

In this case, the assembly descriptor specifies that users within the security role AnonymousRole will be granted access to all the methods in the EventService JavaBean's Home interface.

Security-Role Assignments

Listing 3-23 Security Role Assignments for the EventService JavaBean

<security-role-assignment> 

   <role-name>AnonymousRole</role-name>
   <principal-name>everyone</principal-name>

</security-role-assignment> 

foundation.jar

Enterprise Bean Definitions

Table 3-10 foundation.jar ejb-jar.xml EJB Definitions

Assembly Descriptor

Listing 3-24 Assembly Descriptor Element for the Foundation JavaBeans

<assembly-descriptor>

   <security-role> 
	<description>Anonymous Users</description> 
       <role-name>AnonymousRole</role-name> 
   </security-role> 

   <method-permission> 

      <role-name>AnonymousRole</role-name>

       <method>
          <ejb-name>com.beasys.commerce.foundation.property.
	    EntityPropertyAggregator</ejb-name>
          <method-intf>Home</method-intf>
          <method-name>*</method-name>
       </method>

   </method-permission>

   <method-permission>

      <role-name>AnonymousRole</role-name>

      <method>
         <ejb-name>com.beasys.commerce.ebusiness.catalog.service.
	   data.EntityPropertyManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

   </method-permission>

   <method-permission>

      <role-name>AnonymousRole</role-name>

      <method>
         <ejb-name>com.beasys.commerce.foundation.property.
	   EntityPropertyManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

   </method-permission>

   <method-permission>

      <role-name>AnonymousRole</role-name>

      <method>
         <ejb-name>com.beasys.commerce.foundation.property.
	   LDAPEntityPropertyManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

   </method-permission>

   <method-permission>

      <role-name>AnonymousRole</role-name>

      <method>
         <ejb-name>com.beasys.commerce.foundation.property.
	   DirectPropertyManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

   </method-permission>

   <method-permission>

      <role-name>AnonymousRole</role-name>

      <method>
         <ejb-name>com.beasys.commerce.foundation.property.
	   SchemaManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

   </method-permission>

   <method-permission>

      <role-name>AnonymousRole</role-name>

      <method>
         <ejb-name>com.beasys.commerce.foundation.pipeline.
	   PipelineExecutor</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

   </method-permission>

 ...

</assembly-descriptor>

In this case, the assembly descriptor specifies that users within the security role AnonymousRole will be granted access to all the methods in the each of the Foundation JavaBeans' Home interfaces.

Security-Role Assignments

Listing 3-25 Security Role Assignments for the Foundation JavaBeans

<security-role-assignment> 

   <role-name>AnonymousRole</role-name>
   <principal-name>everyone</principal-name>

</security-role-assignment> 

mail.jar

Enterprise Bean Definitions

Table 3-11 mail.jar ejb-jar.xml EJB Definition

Assembly Descriptor

Listing 3-26 Assembly Descriptor Element for the MailService JavaBean

<assembly-descriptor>

   <security-role> 
	<description>Anonymous Users</description> 
       <role-name>AnonymousRole</role-name> 
   </security-role> 

   <security-role> 
	<description>Administrative Users</description> 
       <role-name>AdminRole</role-name> 
   </security-role> 

   <method-permission>

      <role-name>AnonymousRole</role-name>

      <method>
        <ejb-name>MailService</ejb-name>
        <method-intf>Home</method-intf>
        <method-name>*</method-name>
      </method>

      <method>
        <ejb-name>MailService</ejb-name>
        <method-intf>Remote</method-intf>
        <method-name>sendMail</method-name>
      </method>

      <method>
        <ejb-name>MailService</ejb-name>
        <method-intf>Remote</method-intf>
        <method-name>addToBatch</method-name>
      </method>

      <method>
        <ejb-name>MailService</ejb-name>
        <method-intf>Remote</method-intf>
        <method-name>getTextFromJSP</method-name>
      </method>

      <method>
        <ejb-name>MailService</ejb-name>
        <method-intf>Remote</method-intf>
        <method-name>getJSPResults</method-name>
      </method>

   </method-permission>

   <!-- Permissions for the AdminRole -->

   <method-permission>

      <role-name>AdminRole</role-name>

      <method>
        <ejb-name>MailService</ejb-name>
        <method-intf>Home</method-intf>
        <method-name>*</method-name>
      </method>

      <method>
        <ejb-name>MailService</ejb-name>
        <method-intf>Remote</method-intf>
        <method-name>*</method-name>
      </method>

   </method-permission>

  ...

</assembly-descriptor>

In this case, the assembly descriptor specifies that users within the security role AnonymousRole will be granted access to all the methods in the MailService JavaBean's Home interface, and the following methods in the Remote interface:

Further, users within the security role AdminRole will be granted access to all the methods in the MailService JavaBean's Home and Remote interfaces.

Security-Role Assignments

Listing 3-27 Security Role Assignments for the MailService JavaBean

<security-role-assignment> 

   <role-name>AnonymousRole</role-name>
   <principal-name>everyone</principal-name>

</security-role-assignment> 

<security-role-assignment>

    <role-name>AdminRole</role-name>
    <principal-name>admin</principal-name>
    <principal-name>system</principal-name>

</security-role-assignment>

placeholder.jar

Enterprise Bean Definitions

Table 3-12 placeholder.jar ejb-jar.xml EJB Definitions

Assembly Descriptor

Listing 3-28 Assembly Descriptor Element for the Placeholder JavaBeans

<assembly-descriptor>

   <security-role> 
	<description>Anonymous Users</description> 
       <role-name>AnonymousRole</role-name> 
   </security-role> 

   <security-role> 
	<description>Administrative Users</description> 
       <role-name>AdminRole</role-name> 
   </security-role> 

   <!-- Permissions for the AnonymousRole -->

   <method-permission>

   <role-name>AnonymousRole</role-name>

      <method>
         <ejb-name>com.bea.commerce.platform.placeholder.
	   PlaceholderService</ejb-name>
    	  <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.placeholder.
	   PlaceholderService</ejb-name>
    	  <method-intf>Remote</method-intf>
         <method-name>getContent</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.placeholder.
	   PlaceholderService</ejb-name>
    	  <method-intf>Remote</method-intf>
         <method-name>previewContent</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.placeholder.
	   PlaceholderService</ejb-name>
  	  <method-intf>Remote</method-intf>
         <method-name>setPreviewSlot</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.placeholder.
	   PlaceholderService</ejb-name>
   	  <method-intf>Remote</method-intf>
         <method-name>removePreviewSlot</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.ad.
	   AdBucketService</ejb-name>
    	  <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.ad.
	   AdBucketService</ejb-name>
    	  <method-intf>Remote</method-intf>
         <method-name>getContent</method-name>
      </method>

      <method>
        <ejb-name>com.bea.commerce.platform.ad.
	  AdBucketService</ejb-name>
    	 <method-intf>Remote</method-intf>
        <method-name>userAddAd</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.ad.
	   AdBucketService</ejb-name>
   	  <method-intf>Remote</method-intf>
         <method-name>globalAddAd</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.ad.
	   AdBucketService</ejb-name>
   	  <method-intf>Remote</method-intf>
         <method-name>previewContent</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.ad.
	   AdConflictResolver</ejb-name>
    	  <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.ad.
	   AdConflictResolver</ejb-name>
   	  <method-intf>Remote</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.ad.
	   AdService</ejb-name>
  	  <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.ad.
	   AdService</ejb-name>
    	  <method-intf>Remote</method-intf>
         <method-name>*</method-name>
      </method>

   </method-permission>

   <!-- Permissions for the AdminRole -->

   <method-permission>

      <role-name>AdminRole</role-name>

      <method>
         <ejb-name>com.bea.commerce.platform.placeholder.
	   PlaceholderService</ejb-name>
   	  <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.placeholder.
	   PlaceholderService</ejb-name>
    	  <method-intf>Remote</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.ad.
	   AdBucketService</ejb-name>
  	  <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.ad.
	   AdBucketService</ejb-name>
    	  <method-intf>Remote</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.ad.
	   AdConflictResolver</ejb-name>
   	  <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.ad.
	   AdConflictResolver</ejb-name>
    	  <method-intf>Remote</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.ad.
	   AdService</ejb-name>
  	  <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

      <method>
         <ejb-name>com.bea.commerce.platform.ad.
	   AdService</ejb-name>
   	  <method-intf>Remote</method-intf>
         <method-name>*</method-name>
      </method>

   </method-permission>

 ...

</assembly-descriptor>

In this case, the assembly descriptor specifies that users within the security role AnonymousRole will be granted access to all the methods in each of the Placeholder JavaBeans' Home interface. The com.beasys.commerce.platform.ad.
AdConflictResolver and com.beasys.commerce.platform.ad.AdService JavaBeans also give users in the AnonymousRole access to the methods in their Remote interfaces.

The com.beasys.commerce.platform.placeholder.PlaceholderService JavaBean allows users in the AnonymousRole to access the following methods in its Remote interface:

The com.beasys.commerce.platform.ad.AdBucketService JavaBean allows users in the AnonymousRole to access the following methods in its Remote interface:

Further, users within the security role AdminRole will be granted access to all the methods in each of the Placeholder JavaBeans' Home and Remote interfaces.

Security-Role Assignments

Listing 3-29 Security Role Assignments for the Placeholder JavaBeans

<security-role-assignment> 

   <role-name>AnonymousRole</role-name>
   <principal-name>everyone</principal-name>

</security-role-assignment> 

<security-role-assignment>

    <role-name>AdminRole</role-name>
    <principal-name>admin</principal-name>
    <principal-name>system</principal-name>

</security-role-assignment>

portal.jar

The portal.jar file is a collection of EJBs that provide the portal server.

Enterprise Bean Definitions

Table 3-13 portal.jar ejb-jar.xml EJB Definitions

Security-Role References

Listing 3-30 Security-Role Reference in PortalManager JavaBean

<security-role-ref>

   <description>This ref declares the Anonymous role for this
    bean</description>

   <role-name>AnonymousRole</role-name>
   <role-link>AnonymousRole</role-link>

</security-role-ref>

Assembly Descriptor

Listing 3-31 Assembly Descriptor Element for the Portal JavaBeans

<assembly-descriptor>

   <security-role> 
	<description>Anonymous Users</description> 
       <role-name>AnonymousRole</role-name> 
   </security-role> 

   <method-permission>

       <role-name>AnonymousRole</role-name>

       <method>
          <ejb-name>ejb.portal.PortalManager</ejb-name>
          <method-intf>Home</method-intf>
          <method-name>*</method-name
       </method>

   </method-permission>

 ...

</assembly-descriptor>

In this case, the assembly descriptor specifies that users within the security role AnonymousRole will be granted access to all the methods in the ejb.portal.PortalManager JavaBean's Home interface.

Security-Role Assignments

Listing 3-32 Security Role Assignments for the Portal JavaBeans

<security-role-assignment> 

   <role-name>AnonymousRole</role-name>
   <principal-name>everyone</principal-name>

</security-role-assignment> 

priceService.jar

Enterprise Bean Definitions

Table 3-14 priceService.jar ejb-jar.xml EJB Definition

Assembly Descriptor

Within the priceService.jar file, the ejb-jar.xml deployment descriptor does not register the PriceService stateless session JavaBean with an application assembly descriptor, nor does it define security roles or grant permissions on the JavaBean's methods. This is because PriceService is an EJB that had no security constraints.

Note: Other EJBs that have no security constraints may still have content within the <assembly-descriptor> element. These EJBs were written for a prior release of the BEA WebLogic Server, which required a <method> element for the Home interface even if all methods in the EJB were open.

Security-Role Assignments

Because there are no security contraints on the priceService stateless session JavaBean, the weblogic-ejb-jar.xml deployment descriptor does not define any security role assignments for it.

rules.jar

Enterprise Bean Definitions

Table 3-15 rules.jar ejb-jar.xml EJB Definition

Assembly Descriptor

Listing 3-33 Assembly Descriptor Element for the RulesManager JavaBean

<assembly-descriptor>

    <security-role>
      <description>Administrative Users</description>
      <role-name>AdministrativeRole</role-name>
    </security-role>    

    <security-role>
      <description>Rule Reading Users</description>
      <role-name>RulesReaderRole</role-name>
    </security-role>    

    <security-role>
      <description>Anonymous Users</description>
      <role-name>AnonymousRole</role-name>     
    </security-role>      

    <method-permission>

      <role-name>AnonymousRole</role-name>

      <method>
         <ejb-name>com.bea.commerce.platform.rules.manager.
	   RulesManager</ejb-name>
         <method-intf>Home</method-intf>
         <method-name>*</method-name>
      </method>

    </method-permission>

    <method-permission>

      <role-name>AnonymousRole</role-name>

      <method>
         <ejb-name>com.bea.commerce.platform.rules.manager.
	   RulesManager</ejb-name>
         <method-intf>Remote</method-intf>
         <method-name>evaluateRuleSet</method-name>
      </method>

    </method-permission>

    <method-permission>

      <role-name>AnonymousRole</role-name>

      <method>
         <ejb-name>com.bea.commerce.platform.rules.manager.
	   RulesManager</ejb-name>
         <method-intf>Remote</method-intf>
         <method-name>evaluateRule</method-name>
      </method>

    </method-permission>

    <method-permission>

      <role-name>AdministrativeRole</role-name>

      <method>
         <ejb-name>com.bea.commerce.platform.rules.manager.
	   RulesManager</ejb-name>
         <method-intf>Remote</method-intf>
         <method-name>setRuleSet</method-name>
      </method>

    </method-permission>

    <method-permission>

      <role-name>AdministrativeRole</role-name>
      <role-name>RulesReaderRole</role-name>

      <method>
         <ejb-name>com.bea.commerce.platform.rules.manager.
	   RulesManager</ejb-name>
         <method-intf>Remote</method-intf>
         <method-name>getRuleSet</method-name>
      </method>

    </method-permission>

    <method-permission>

      <role-name>AdministrativeRole</role-name>

      <method>
         <ejb-name>com.bea.commerce.platform.rules.manager.
	   RulesManager</ejb-name>
         <method-intf>Remote</method-intf>
         <method-name>getRuleSets</method-name>
      </method>

    </method-permission>

    <method-permission>

      <role-name>AdministrativeRole</role-name>

      <method>
         <ejb-name>com.bea.commerce.platform.rules.manager.
	   RulesManager</ejb-name>
         <method-intf>Remote</method-intf>
         <method-name>removeRuleSet</method-name>
      </method>

    </method-permission>                      

  ...

</assembly-descriptor>

In this case, the assembly descriptor specifies that users within the security role AnonymousRole will be granted access to all the methods in the RulesManager JavaBean's Home interface. Additionally, users within the AnonymousRole will be granted access to the evaluateRuleSet and evaluateRule methods in the Remote interface.

Users in the AdministrativeRole will be granted access to the setRuleSet, getRuleSet, getRuleSets, and removeRuleSet methods in the RulesManager JavaBean's Remote interface. Users in the RulesReaderRole will also be granted access to the getRuleSet method in the Remote interface.

Security-Role Assignments

Listing 3-34 Security Role Assignments for the RulesManager JavaBean

<security-role-assignment>

    <role-name>AdministrativeRole</role-name>
    <principal-name>admin</principal-name>
    <principal-name>system</principal-name>

</security-role-assignment>

<security-role-assignment>

    <role-name>RulesReaderRole</role-name>
    <principal-name>wlcm_internal</principal-name>

</security-role-assignment>

<security-role-assignment>

    <role-name>AnonymousRole</role-name>
    <principal-name>everyone</principal-name>

</security-role-assignment>

servicemgr.jar

The servicemgr.jar file contains an EJB that provides version information.

Enterprise Bean Definitions

Table 3-16 servicemgr.jar ejb-jar.xml EJB Definition

Assembly Descriptor

Listing 3-35 Assembly Descriptor Element for the CommerceServiceManager JavaBean

<assembly-descriptor>

      <security-role>
        <description>Anonymous Users</description>
        <role-name>AnonymousRole</role-name>
      </security-role>

    <method-permission>

          <role-name>AnonymousRole</role-name>

          <method>
             <ejb-name>com.beasys.commerce.servicemanager.
	       CommerceServiceManager</ejb-name>
             <method-intf>Home</method-intf>
             <method-name>*</method-name>
          </method>

    </method-permission>

</assembly-descriptor>

In this case, the assembly descriptor specifies that users within the security role AnonymousRole will be granted access to all the methods in the CommerceServiceManager JavaBean's Home interface.

Security-Role Assignments

Listing 3-36 Security Role Assignments for the CommerceServiceManager JavaBean

<security-role-assignment>

    <role-name>AnonymousRole</role-name>
    <principal-name>everyone</principal-name>

</security-role-assignment>

uupexample.jar

Enterprise Bean Definitions

Table 3-17 uupexample.jar ejb-jar.xml EJB Definition

Assembly Descriptor

Within the uupexample.jar file, the ejb-jar.xml deployment descriptor does not register the UnifiedUser entity JavaBean with an application assembly descriptor, nor does it define security roles or grant permissions on the JavaBean's methods. This is because UnifiedUser is an EJB that had no security constraints.

Note: Other EJBs that have no security constraints may still have content within the <assembly-descriptor> element. These EJBs were written for a prior release of the BEA WebLogic Server, which required a <method> element for the Home interface even if all methods in the EJB were open.

Security-Role Assignments

Because there are no security contraints on the UnifiedUser entity JavaBean, the weblogic-ejb-jar.xml deployment descriptor does not define any security role assignments for it.