Page 1 of 1

Securing new application with ejbrole.

Posted: Mon May 05, 2014 2:13 am
by joulin
Hi,
I am in an Z/OS environment and i want to call SAF for securing my applications. I install the sepcial dovetail jar and do all necessary for implemantation like described in documentation. The manager EJBROLE role is called and all work fine like described.

Now i have an application (istrobe) who doesn't call ejbrole. At the minimum i want that this application will be available for user who have EJBROLE Istrobe. I don't find how to do this (i saw what was written on previous forum but it doesn't work). When i call the istrobe URL the signon screen is not displayed (like an unsecured application).

Thank for your help.
Regards

Re: Securing new application with ejbrole.

Posted: Sun May 25, 2014 3:20 pm
by dovetail
suggest you contact Compuware on configuring security for iStrobe

Re: Securing new application with ejbrole.

Posted: Mon May 26, 2014 4:42 am
by joulin
Hi, Thanks for the reply. I ask to compuware to secure the application.
But in general, if the programmer doesn't interface the applet to use ejbrole, i have no security and no signon.
There is no way to force the use of an ejbrole when calling an applet ?

Regards

Re: Securing new application with ejbrole.

Posted: Tue May 27, 2014 9:25 am
by dovetail
I would suspect that the problem is that you need to add role based security to the iStrobe web application - to protect certain / all sevlets. This would typically be don in the application's web.xml. See the Tomcat documentation for details.