-
Book Overview & Buying
-
Table Of Contents
JBoss AS 5 Development
Java EE security services provide a robust and easily configured security mechanism for authenticating users and authorizing access to application functions and associated data.
Authentication is the process by which the user of an application (any type of Java program, including EJB, servlets, and so forth) is verified.
Authorization is about managing access to protected system resources based on the rights of a user or class of users. Authorization, therefore, assumes that authentication has occurred; otherwise it would be impossible to grant any access control if you don't know who the user is.
In Java EE, the component containers are responsible for providing application security. A container, basically, provides two types of security— declarative and programmatic. Let's see them:
Declarative security: This expresses an application component's security requirements by means of deployment descriptors, whose information is contained in an external file, and can...
Change the font size
Change margin width
Change background colour