Using Programmatic Security
Using Programmatic Security
Application Server. Not all security information can be specified using annotations, however.
Some information must be specified in the application deployment descriptors.
to generate it from annotations in the source code. This leads to a declarative programming
style, where the programmer says what should be done and tools emit the code to do it. It also
eliminates the need for maintaining side files that must be kept up to date with changes in
source files. Instead the information can be maintained in the source file.
class file are described in the following sections:
Programmatic security is useful when declarative security alone is not sufficient to express the
security model of an application. The API for programmatic security consists of two methods of
the EJBContext interface and two methods of the servlet HttpServletRequest interface. These
methods allow components to make business logic decisions based on the security role of the
caller or remote user.