Novell ACCESS MANAGER 3.1 SP2 - J2EE AGENT GUIDE 2010 Manual

Contents

Novell ACCESS MANAGER 3.1 SP2 - J2EE AGENT GUIDE 2010 Manual Manual pdf 100 page image

100 Novell Access Manager 3.1 SP2 J2EE Agent Guidenovdocx (en) 16 April 20106 To save your Role policy, click OK > Apply Changes.7 Activate the Role policy for your Identity Server cluster configuration. Click Identity Servers >Edit > Roles.8 Select the name of your Role policy, click Enable, then click OK.9 Click Identity Servers > Update to update the Identity Server.10 Continue with Section 7.4.2, “Creating Authorization Policies,” on page 100.7.4.2 Creating Authorization PoliciesThe payroll application is a .ear file that contains both an EJB module and a Web (.war) module.Each module type requires its own type of Authorization policies, and to fully protect theapplication, you must create the following policies: “Creating EJB Authorization Policies” on page 100 “Creating Web Authorization Policies” on page 102Creating EJB Authorization PoliciesYou need to create two policies: one that permits Managers to access EJB resources and one thatpermits Employees to access EJB resources.1 In the Administration Console, click Devices > Policies.2 To create an Authorization policy for the employees, click New, specify a name for the policy,select J2EE Agent: EJB Authorization as the type, then click OK.3 For the first rule, click New, set up a condition that permits access if the user has been assignedthe Employee role, then click OK. Your rule should look similar to the following: