基于OC4J的EJB应用的安全性问题

Security of EJB Application Based on OC4J

EJB应用的安全性包括EJB客户端认证和访问授权2个方面。介绍了利用OC4J的验证提供者JAZN实现EJB客户端验证的方法,并且结合具体实例对在OC4J中使用声明方式和编程方式实现访问授权进行了详细分析。最后比较了这2种授权方式的不同特性并总结出它们的应用特点。

Security of EJB application includes two aspects:EJB client authorization and visiting authorization. methods of realizing EJB client authentzation using JAZN are introduced. How to implement authorization using declarative methods and programmatic methods in the OC4J is analyzed with an example. Features of these two methods are compared and their application characteristics are summarized.