| <?xml version="1.0" encoding="UTF-8"?> |
| <!DOCTYPE html |
| PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> |
| <html> |
| <head> |
| <link rel="stylesheet" type="text/css" href="../../com.ibm.help.doc/swg_info_common.css" /> |
| <title>Working in the Security page</title> |
| <script language="JavaScript"> |
| function popup_window( url, id, width, height ) |
| { |
| popup = window.open( url, id, 'toolbar=no,scrollbars=no,location=no,statusbar=no,menubar=no,resizable=no,width=' + width + ',height=' + height + ',left=,top=' ); |
| popup.focus(); |
| } |
| </script><script language="JavaScript" src="help/liveHelp.js"></script></head> |
| <body id="twedtwbx3"><a name="twedtwbx3"><!-- --></a> |
| |
| <h1 class="topictitle1">Working in the Security page</h1> |
| <div><div class="skipspace">In the <b>Security</b> page of the <a href="ccwebxml.html">Web |
| |
| deployment descriptor editor</a>, you can add or remove the names of each defined security role.<p>To work |
| |
| in the <b>Security</b> page, complete the following steps:</p> |
| </div> |
| <ol><li><span>Open a Web project in the Project Explorer.</span></li> |
| <li><span>Double-click the Web project's <b> Deployment Descriptor</b> file |
| |
| in the Project Explorer. The Web deployment descriptor editor opens.</span></li> |
| <li><span>Click the<b> Security</b> tab to open the <b>Security</b> page.</span></li> |
| <li><span>The <b>Security</b> page has the following two sections: </span><ul><li><b>Security Roles</b> - lists and lets you add or remove the security |
| |
| roles defined for this Web application as well as provide a description of |
| |
| each role.</li> |
| <li><b>Security Constraints</b> - lets you add or remove security constraints |
| |
| for specific security roles as well as add descriptions of each security constraint. |
| |
| In addition, you can add or remove Web resources and their HTTP methods, define |
| |
| the security roles who are authorized to access the Web resources, and specify |
| |
| user data constraints on user data: (None, Integral, or Confidential.) None |
| |
| means that the application requires no transport guarantees. Integral means data |
| |
| cannot be changed in transit between client and server. Confidential means |
| |
| data content cannot be observed while it is in transit. These data contraints usually require the |
| |
| use of SSL.</li> |
| </ul> |
| </li> |
| </ol> |
| </div> |
| <div><p><b class="relconceptshd">Related concepts</b><br /> |
| <a href="ccwebxml.html" title="">The Web deployment descriptor editor</a><br /> |
| </p> |
| <p><b class="reltaskshd">Related tasks</b><br /> |
| <a href="../org.eclipse.jst.j2eeapp.doc.user/topics/tjaddsr.html">Defining security roles for enterprise applications</a><br /> |
| <a href="twedtwbx.html" title="">Configuring Web applications using the Web deployment descriptor editor</a><br /> |
| </p> |
| </div><p> |
| (C) Copyright IBM Corporation 2000, 2005. All Rights Reserved. |
| </p> |
| </body> |
| </html> |