Enable security on EJB method group authority

If EJB security is defined in 3.5.x, an additional step after migration is required to bind security roles to EJB 1.1 method names. Some of the method names for enterprise beans have changed with EJB 1.1. This table provides some examples:

EJB 1.0 method name EJB 1.1 method name
ejbCreate create
ejbRemove remove
ejbGetEJBMetaData getEJBMetaData
ejbFindBy findBy

After you migrate your application, use the Application Assembly Tool to add the EJB 1.1 method name to the method permission created for the EJB 1.0 method. To add EJB Security Roles, first map a network drive from your workstation to the iSeries where the WAS installation resides. Use the Application Assembly Tool to perform these steps:

  1. On the Welcome to Application Assembly Tool panel, click cancel.
  2. Click File --> Open.
  3. Locate the /QIBM/Userdata/WebAsAdv4/myinstance/installedApps/ directory on your mapped iSeries drive. Select the .ear file that contains the ejb module that you want to update and click OK.
  4. Expand EJB Modules --> module_name, where module_name is the name of the module that you want to update.
  5. Click Method Permissions.
  6. Select the method permission that contains the EJB 1.0 method name.
  7. In the method area, click Add.
  8. In the Add Methods dialog box expand the jar file, bean and interface that contains the EJB 1.1 method name.
  9. Select the method and click OK.
  10. Repeat for each method name that you want to add.
  11. Click Apply.
  12. Click File --> Save As to save the updated EAR file to a temporary file. Reinstall the application using the temporary file.