12 Configuring EJB Application Security

EJB application security involves two realms: granting permissions if you download into a browser and configuring your application for authentication and authorization. This chapter talks about setting up users, roles, and groups for EJBs. However, for basic OC4J security configuration information, including CSiV2, see the Oracle Application Server Containers for J2EE Security Guide.

This chapter covers the following subjects:

• Granting Permissions in Browser

• Authenticating and Authorizing EJB Applications

• Specifying Credentials in EJB Clients