<b>jboss4+ejb3下操纵JAAS</b>[Java编程]

我们知道,JAAS包含了Authentication和Authorization,下面我们辨别看看:

Authentication解析以下:

1)类的annotate以下

@SecurityDomain("other")

public class CalculatorBean implements Calculator

这样将从users.properties中读取Authentication信息:

kabir=validpassword

2)利用的jboss类以下:

import org.jboss.security.SecurityAssociation;

import org.jboss.security.SimplePrincipal;

3)SimplePrincipal用来设置考证原则:

SecurityAssociation.setPrincipal(new SimplePrincipal("kabir"));

4)SecurityAssociation用来按照原则举行考证:

SecurityAssociation.setCredential("invalidpassword".toCharArray());

5)考证不通过,会抛exception

Authorization解析以下:

1)办法中指明角色

@MethodPermissions({"teacher"})

public int divide(int x, int y)
{
return x / y;
}

2)roles.properties中设置角色

kabir=student

3)运行中判断权限,并提醒:

[java] Insufficient method permissions, principal=kabir, interface=org.jboss.ejb3.EJBContainerInvocation, requiredR

oles=[teacher], principalRoles=[student]