appserver/tests/appserv-tests/devtests/security/plogin/standalone/descriptor/ejb-jar.xml

<?xml version="1.0" encoding="UTF-8"?>
<!--

    Copyright (c) 2017, 2018 Oracle and/or its affiliates. All rights reserved.

    This program and the accompanying materials are made available under the
    terms of the Eclipse Public License v. 2.0, which is available at
    http://www.eclipse.org/legal/epl-2.0.

    This Source Code may also be made available under the following Secondary
    Licenses when the conditions for such availability set forth in the
    Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
    version 2 with the GNU Classpath Exception, which is available at
    https://www.gnu.org/software/classpath/license.html.

    SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0

-->

<ejb-jar version="2.1" xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/ejb-jar_2_1.xsd">
    <display-name>MyEntApp1-EJBModule</display-name>
    <enterprise-beans>
        <session>
            <display-name>MySession1SB</display-name>
            <ejb-name>MySession1Bean</ejb-name>
            <home>MySession1RemoteHome</home>
            <remote>MySession1Remote</remote>
            <ejb-class>MySession1Bean</ejb-class>
            <session-type>Stateless</session-type>
            <transaction-type>Container</transaction-type>
        </session>
        </enterprise-beans>
    <assembly-descriptor>


        <security-role>
                   <role-name>staff</role-name>
        </security-role>
        <security-role>
                   <role-name>staff2</role-name>
        </security-role>
        <security-role>
                   <role-name>staff3</role-name>
        </security-role>

        <method-permission>
             <description>method authorized to only staff role</description>
             <role-name>staff</role-name>
             <method>
                 <ejb-name>MySession1Bean</ejb-name>
                 <method-name>businessMethod</method-name>
             </method>
        </method-permission>


        <method-permission>
             <description>method authorized to only staff2 role</description>
             <role-name>staff2</role-name>
             <method>
                 <ejb-name>MySession1Bean</ejb-name>
                 <method-name>businessMethod2</method-name>
             </method>
        </method-permission>

        <method-permission>
             <description>method authorized to only staff3 role</description>
             <role-name>staff3</role-name>
             <method>
                 <ejb-name>MySession1Bean</ejb-name>
                 <method-name>businessMethod3</method-name>
             </method>
        </method-permission>

        <container-transaction>
            <method>
                <ejb-name>MySession1Bean</ejb-name>
                <method-name>*</method-name>
            </method>
            <trans-attribute>Required</trans-attribute>
        </container-transaction>
        </assembly-descriptor>
    </ejb-jar>