info.ejava.examples.secureping.ejb

Class SecurePingEJB

java.lang.Object

info.ejava.examples.secureping.ejb.SecurePingEJB

All Implemented Interfaces:

SecurePing, SecurePingLocal, SecurePingRemote

public class SecurePingEJB
extends Object
implements SecurePingRemote, SecurePingLocal

This session bean provides several methods; each of which will require some type of role associated with the user in order to successfully invoke them.

Field Summary

Fields

Modifier and Type	Field and Description
(package private) SessionContext	ctx
private static org.slf4j.Logger	logger

Constructor Summary

Constructors

Constructor and Description
SecurePingEJB()

Method Summary

Modifier and Type	Method and Description
private String	getInfo(String prefix) This method creates a status string based on security information obtained from the SessionContext.
String	getPrincipal()
void	init()
boolean	isCallerInRole(String role) This method allows the RMI Test to check whether the current subject has a specific role.
String	pingAdmin() Callers of this method must have the "admin" role.
String	pingAll() This method is permitted to be called by anyone.
String	pingExcluded() No one should be allowed to call this method.
String	pingUser() Callers of this method must have the "user" role.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

private static final org.slf4j.Logger logger

ctx

SessionContext ctx

Constructor Detail

SecurePingEJB

public SecurePingEJB()

Method Detail

init

@PostConstruct
public void init()

getInfo

private String getInfo(String prefix)

This method creates a status string based on security information obtained from the SessionContext.

pingAll

@PermitAll
public String pingAll()

This method is permitted to be called by anyone.

Specified by:

pingAll in interface SecurePing

pingUser

@RolesAllowed(value="user")
public String pingUser()

Callers of this method must have the "user" role.

Specified by:

pingUser in interface SecurePing

pingAdmin

@RolesAllowed(value="admin")
public String pingAdmin()

Callers of this method must have the "admin" role.

Specified by:

pingAdmin in interface SecurePing

pingExcluded

@DenyAll
public String pingExcluded()

No one should be allowed to call this method.

Specified by:

pingExcluded in interface SecurePing

isCallerInRole

@PermitAll
public boolean isCallerInRole(String role)

This method allows the RMI Test to check whether the current subject has a specific role. This type of method would normally be used within an EJB to perform object-level access control.

Specified by:

isCallerInRole in interface SecurePing

getPrincipal

@PermitAll
public String getPrincipal()

Specified by:

getPrincipal in interface SecurePing