Adding users and groups to roles using an assembly tool
After creating new roles and assigning them to enterprise bean and web resources, use this task to add users and groups to roles with an assembly tool.
Before you begin
About this task
The following information applies to authorization using WebSphere® Application Server bindings. If you create WebSphere Application Server bindings, but specify System Authorization Facility (SAF) authorization, the WebSphere Application Server bindings are ignored. If SAF authorization is to be used, you must create a SAF EJBROLE profile for each Java™ Platform, Enterprise Edition (Java EE) role in your application, and permit users and groups to that role. Refer to System Authorization Facility for role-based authorization for reference.
To add users and groups to roles using an assembly tool, follow these steps:
Procedure
- In the Project Explorer view of an assembly tool, right-click an enterprise application
project, or Enterprise Archive (EAR) file, and click Open With > Deployment Descriptor
Editor.
An application deployment descriptor editor opens on the EAR file. To access information about the editor, press F1 and click Application deployment descriptor editor.
- Click the Security tab and, under the main panel, click Add.
- In the Add Security Role wizard, name and describe the security role. Click Finish.
- Under WebSphere Bindings, select the user or group extension properties for the security role. Available values include: Everyone, All authenticated users, and Users/Groups.
- If you selected Users/Groups, click Add. In the wizard that opens, specify a user or group name and click Finish. Repeat this step until you added all the users and groups to which the security role applies.
- Close the application deployment descriptor editor and, when prompted, click Yes to save the changes.
Results
However, a Java EE 5 or later module can exist within an application that includes pre-Java EE 5 files and uses the .xmi file name extension.
The ibm-webservices-ext.xmi, ibm-webservices-bnd.xmi, ibm-webservicesclient-bnd.xmi, ibm-webservicesclient-ext.xmi, and ibm-portlet-ext.xmi files continue to use the .xmi file extensions.