Work Security Maps

A work security map for a resource adapter maps an EIS principal or group to a application principal or group. A work security map is useful in situations where one or more application principals execute operations initiated by principals or user groups in the EIS. A resource adapter can have multiple work security maps. A work security map can map either principals or groups, but not both.

To create a work security map, use the asadmin create-connector-work-security-map command. For details, see the Sun GlassFish Enterprise Server v3 Reference Manual.

The work security map configuration supports the wildcard asterisk (*) character to indicate all users or all user groups. When an EIS principal sends a request to the Enterprise Server, the Enterprise Server first checks for an exact match to a mapped application principal using the work security map defined for the resource adapter. If there is no exact match, the Enterprise Server uses the wild card character specification, if any, to determine the application principal.