要根据安全角色来作出此类决定。
EJB部署计划中的安全角色映射。
您将看到名为agents的J2EE安全角色。
在部署过程中用户和组可以与每个安全角色联结。
Users or groups can be associated with each security role during deployment. In the sample application, two security roles have been defined: manager and employee.
图3显示了为示例Web应用程序创建的安全角色。
Figure 3 shows the security roles created for our sample Web application.
使用WebSphere绑定扩展属性来映射安全角色。
Mapping security roles using the WebSphere binding extension properties.
按钮来收集在所有Web及EJB模块中定义的安全角色。
Button to collect all the security roles defined in all the Web and EJB modules.
可将J2EE安全角色和约束添加到应用程序的部署描述符。
J2EE security roles and constraints are added to the deployment descriptor of the application.
首先，在EJB部署描述符中声明安全角色，如清单8所示。
First, security roles are declared in the EJB deployment descriptor similar to the example shown in Listing 8.
管理和应用程序安全性需要启用，以实施安全角色。
Administrative and application security needs to be enabled in order for security roles to be enforced.
两个安全角色使用security-role元素定义。
The two security roles are defined using security-role elements.
对于我们的示例，安全角色已经在导入的项目交换文件中进行了定义。
For our example, the security roles are already defined in the project interchange file you imported.
此后，必须在部署期间分配一个是指定的安全角色的成员的实际用户。
After that, during the deployment, you have to assign a real user that is a member of the specified security role.
答：首先，您应该确保您的Servlet使用了J2EE安全角色。
Answer: To begin with, you should secure your servlets using J2EE security roles.
图7展示了在Web项目中定义的安全角色和在应用程序中配置的绑定。
Figure 7 shows the security role that is defined on the Web project and the binding configured on the application.
security - roleXML元素包含单个安全角色的声明。
The security-role XML element contains a declaration of a single security role.
使用WebSphere绑定扩展属性将安全角色映射到身份验证状态。
Use the WebSphere binding extension properties to map the security roles to an authentication status.
安全角色的名称在role元素的 role-name属性中指定。
The name of the security role is specified in the role-name attribute of the role element.
在这一步里，我们建立了前面定义的安全角色和他们的身份验证状态之间的关系。
In this step, we establish the relationship between the security roles that we defined previously and their authentication status.
连接可以定义为Restricted，只有具有指定安全角色的用户可以使用。
The connection can also be defined as Restricted, which is only available to the users who have the specified security role.
您可以看到我们已经将EJB的方法映射到Agents安全角色，如图3所示。
You can see that we've mapped the methods of the EJB to the Agents security role, as shown in Figure 3.
但可以修改此缺省行为，而将组件的所有方法委托为作为特定安全角色的成员运行。
But you can modify this default behaviour and delegate all methods of the component to run as a member of a specific security role.
xml文件列出应用程序中存在的约束和安全角色以及允许访问某个目录的角色。
The web.xml file lists constraints and security roles that exist in your application as well as the roles that are allowed access to a certain directory.
在J2EE应用程序内，您可以基于这些角色定义和命名安全角色及约束资源访问。
Within the J2EE application, you can define and name security roles and constrain resource access based on those roles.
必须创建一个用于对所有通过验证和没有通过验证的系统用户进行分组的安全角色。
A security role that groups all authenticated and unauthenticated system users must be created.
现在您已经设置了三个GBeans和领域，并且定义了您的安全角色和约束。
You now have the three GBeans and the realm set up, and your security roles and constraints are defined.
然后将安全角色映射到CommunityEdition特定部署计划中的主体。
You then map the security roles to principals in the Community Edition specific deployment plan.
在J2EE应用程序内，您可以基于这些角色定义和命名安全角色及约束资源访问。
Within the J2EE application, you can define and name security roles and constrain resource access based on those roles.
此文件(如清单16所示)类似于TestSuite计划，但是不要求使用安全角色。
This file, shown in Listing 16, is similar to the TestSuite plan but doesn't require security roles.
角色将在应用程序部署时映射到实际的用户和组（在称为安全角色映射 的过程期间进行）。
The roles are mapped to real users and groups at application deployment time, during a process called security role mapping.
应用推荐