EJB 3.0: Defining user roles

[anand tiwari]

Hi, I have a bit of confusion in defining the user roles in an ejb application. I got a sample code from the book 'EJB 3 in action'

@DeclareRoles("BIDDER", "CSR", "ADMIN")
@Stateless
public class BidManagerBean implements BidManager {
@RolesAllowed("CSR, ADMIN")
public void cancelBid(Bid bid, Item item) {...}

My doubt is how to associate the roles 'BIDDER','CSR' AND 'ADMIN' shown above?
I mean where to define the mapping for these roles?

Can someone please help?

Thanks

[Jeanne Boyarsky]

This tends to be application server specific and go in a vendor defined xml file. What app server are you using?

[anand tiwari]

I am using JBoss application server.Can you please tell in which xml file the entires will go if i want to define the user roles??

[Jeanne Boyarsky]

I haven't used JBoss specifically. Let's move this to the JBoss forum where someone is more likely to know.

[Jaikiran Pai]

Anand,

Which is the login module that you are using with the bean? Each login module has its own way of defining roles. For UserRolesLoginModule, which relies on properties files (users.properties and roles.properties), the roles can be mentioned as below:

roles.properties:
----------------

#username=rolename
myname=ADMIN
someone=BIDDER
otherguy=CSR

where myname, someone, otherguy are the names of the individuals and ADMIN, BIDDER, CSR are the roles.

Here is an good wiki article about UsersRolesLoginModule in JBoss.