Sun Java System Application Server Enterprise Edition 8.1 2005Q2 Developer's Guide

- Previous: Programmatic Security
- Next: Component Level Security

### Application Level Security

The application XML deployment descriptor (`application.xml`) contains authorization descriptors for all user roles for accessing the application’s servlets and EJB components. On the application level, all roles used by any application container must be listed in a `role-name` element in this file. The role names are scoped to the EJB XML deployment descriptors (`ejb-jar.xml` and `sun-ejb-jar.xml` files) and to the servlet XML deployment descriptors (`web.xml` and `sun-web.xml` files). The `sun-application.xml` file must also contain matching `security-role-mapping` elements for each `role-name` used by the application.

- Previous: Programmatic Security
- Next: Component Level Security

- © 2010, Oracle Corporation and/or its affiliates