Authentication分析如下:
1)类
annotate如下@SecurityDo
("other")public
CalculatorBean implements Calculator这样将从users.properties中读取Authentication信息:
kabir=validpassword
2)使用
jboss类如下:import org.jboss.security.SecurityAssociation;
import org.jboss.security.SimplePrincipal;
3)SimplePrincipal用来设置验证原则:
SecurityAssociation.
Principal(
SimplePrincipal("kabir"));4)SecurityAssociation用来根据原则进行验证:
SecurityAssociation.
Credential("invalidpassword".toCharArray
);5)验证不通过,会抛exception
Authorization分析如下:
1)思路方法中指明角色
@MethodPermissions({"teacher"})
public 
divide( x, y)
{
x / y;
}2)roles.properties中设置角色
kabir=student
3)运行中判断权限,并提示:
[java] Insufficient method permissions, principal=kabir,
erface=org.jboss.ejb3.EJBContainerInvocation, requiredRoles=[teacher], principalRoles=[student]
最新评论