Jboss EJB3.0 security

发布: 2007-7-01 18:47 | 作者: admin | 来源: | 查看: 21次 | 进入软件测试论坛讨论

Calculator.java

package org.jboss.tutorial.security.bean;

import javax.ejb.Remote;

@Remote

public interface Calculator

{

   int add(int x, int y);

   int subtract(int x, int y);

   int divide(int x, int y);

}

CalculatorBean.java

package org.jboss.tutorial.security.bean;

import org.jboss.ejb3.security.SecurityDomain;

import javax.ejb.MethodPermissions;

import javax.ejb.Stateless;

import javax.ejb.TransactionAttribute;

import javax.ejb.TransactionAttributeType;

import javax.ejb.Unchecked;

@Stateless

@SecurityDomain("other")

public class CalculatorBean implements Calculator

{

   @Unchecked    //it@#s ok to delete this line,it means to use this method without checked

   @TransactionAttribute(TransactionAttributeType.REQUIRES_NEW)

public int add(int x, int y)

   {

      return x + y;

   }

   @MethodPermissions({"student","teacher"})   //note that we can more role here

   public int subtract(int x, int y)

   {

      return x - y;

   }

   @MethodPermissions({"teacher"})

   public int divide(int x, int y)

   {

      return x / y;

   }

}

这里substract方法定义了访问对象：student和teacher ; divide 方法定义了访问对象为: teacher .可以看role.properties,当然也可以加入些自定义对象。

Client.java

package org.jboss.tutorial.security.client;

import org.jboss.security.SecurityAssociation;

import org.jboss.security.SimplePrincipal;

import org.jboss.tutorial.security.bean.Calculator;

import javax.naming.InitialContext;

public class Client

{

   public static void main(String[] args) throws Exception

   {

      InitialContext ctx = new InitialContext();

      Calculator calculator = (Calculator) ctx.lookup(Calculator.class.getName());

      System.out.println("Everybody can add");

      System.out.println("1 + 1 = " + calculator.add(1, 1));

      System.out.println("Change role:Kabir is a student");

      SecurityAssociation.setPrincipal(new SimplePrincipal("kabir"));

      SecurityAssociation.setCredential("validpassword".toCharArray());

      System.out.println("Students are allowed to do subtraction but division");

      System.out.println("1 - 1 = " + calculator.subtract(1, 1));

      try

      {

          System.out.println("16/4="+calculator.divide(16, 4));

      }

      catch (SecurityException ex)

      {

         System.out.println("Kabir try to do division:"+ex.getMessage());

      }



      System.out.println("Change role:roson is a teacher");

      SecurityAssociation.setPrincipal(new SimplePrincipal("roson"));

      SecurityAssociation.setCredential("sandy".toCharArray());

      System.out.println("Teacher are allowed do substraction and division");

      System.out.println("2 - 1 = " + calculator.subtract(2, 1));

      System.out.println("16/4 = "+calculator.divide(16, 4));

   }

}

这里有两个人物分别为: kabir 是student 密码为 validpassword ; roson 是 teacher 密码为 sandy。

这两个人调用了减、除这两个方法程序将根据访问权限做相应的处理。

users.properties

kabir=validpassword

roson=sandy

里面是username=password这样的格式，一行一个用户。

roles.properties

kabir=student

roson=teacher

里面是username=role1,role2,role3，即用户和该用户所属的所有角色。

这里附上log4j.properties 在jboss-EJB-3.0_Preview_5.zip　里面没有这个老是显示缺少appender。有了这个将在该目录下生成个record.log日志文件

log4j.properties

log4j.appender.R=org.apache.log4j.RollingFileAppender

log4j.appender.R.File=record.log

log4j.appender.R.layout=org.apache.log4j.PatternLayout

log4j.appender.R.layout.ConversionPattern=%p %d{hh:mm:ss} %t %c{1} -%m%n

log4j.appender.R.MaxBackupIndex=1

log4j.appender.R.MaxFileSize=100KB

log4j.appender.stdout.layout=org.apache.log4j.PatternLayout

log4j.appender.stdout.layout.ConversionPattern=%5p [%t] (%F:%L) -%m%n

log4j.appender.stdout=org.apache.log4j.ConsoleAppender

log4j.rootLogger=stdout,R

运行：参考installing.html

Windows下

打开命令提示符cmd，到 jboss_home/bin

Run.bat –c all

用ant

先build后run 就行了。

讨论：

由于对jaas接触的不多，只能尽力说说自己的一些想法和改过的地方。