22 Configuring Security Services

EJB application security involves two realms: granting permissions if you download into a browser and configuring your application for authentication and authorization. This chapter talks about setting up users, roles, and groups for EJBs.

This chapter explains:

• Granting Permissions in Browser

• Authenticating and Authorizing EJB Applications

• Specifying Credentials in EJB Clients

• Retrieving Credentials from an EJB Using the JAAS API

• Configuring EJB 3.0 Security Options

For more information, see:

• "Understanding EJB Security Services"

• Oracle Containers for J2EE Security Guide