appserver/tests/appserv-tests/devtests/security/jaccmr8/descriptor/ejb-jar.xml

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!--

    Copyright (c) 2013, 2018 Oracle and/or its affiliates. All rights reserved.

    This program and the accompanying materials are made available under the
    terms of the Eclipse Public License v. 2.0, which is available at
    http://www.eclipse.org/legal/epl-2.0.

    This Source Code may also be made available under the following Secondary
    Licenses when the conditions for such availability set forth in the
    Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
    version 2 with the GNU Classpath Exception, which is available at
    https://www.gnu.org/software/classpath/license.html.

    SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0

-->

<ejb-jar xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         metadata-complete="false" version="3.1"
         xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/ejb-jar_3_1.xsd">
    <module-name>jaccmr8-ejb</module-name>
        <enterprise-beans>
                <!-- See EJB annotations
        <session>
            <display-name>HelloStatefulEJB</display-name>
            <ejb-name>HelloStatefulEJB</ejb-name>
            <business-local>org.glassfish.jacc.test.mr8.HelloStateful</business-local>
            <ejb-class>org.glassfish.jacc.test.mr8.HelloStatefulEJB</ejb-class>
        </session>
                -->
                <session>
                        <display-name>HelloEJB</display-name>
                        <ejb-name>HelloEJB</ejb-name>
                        <business-local>org.glassfish.jacc.test.mr8.Hello</business-local>
                        <ejb-class>org.glassfish.jacc.test.mr8.HelloEJB</ejb-class>
                        <!-- GLASSFISH-20036 fixes IllegalStateException when role-refs are not declared.
                             The @DeclareRoles annotation provides the linkage between roles silently.
                        <security-role-ref>
                                <role-name>javaUsers</role-name>
                                <role-link>javaUsers</role-link>
                        </security-role-ref>
                        -->
                </session>
        </enterprise-beans>
        <assembly-descriptor>
                <security-role>
                        <role-name>javaUsers</role-name>
                </security-role>
                <method-permission>
                        <role-name>javaUsers</role-name>
                        <method>
                                <ejb-name>HelloEJB</ejb-name>
                                <method-name>methodAuthUser</method-name>
                        </method>
                </method-permission>
                <method-permission>
                        <role-name>**</role-name>
                        <method>
                                <ejb-name>HelloEJB</ejb-name>
                                <method-name>methodAnyAuthUser</method-name>
                        </method>
                </method-permission>
        </assembly-descriptor>
</ejb-jar>