| <?xml version="1.0" encoding="UTF-8"?> |
| <!DOCTYPE html |
| PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> |
| <html> |
| <head> |
| <!-- /******************************************************************************* |
| * Copyright (c) 2000, 2005 IBM Corporation and others. |
| * All rights reserved. This program and the accompanying materials |
| * are made available under the terms of the Eclipse Public License v1.0 |
| * which accompanies this distribution, and is available at |
| * http://www.eclipse.org/legal/epl-v10.html |
| * |
| * Contributors: |
| * IBM Corporation - initial API and implementation |
| *******************************************************************************/ --> |
| <link rel="stylesheet" type="text/css" href="../../org.eclipse.wst.doc.user/common.css" /> |
| <title>Working in the Security page</title> |
| </head> |
| <body id="twedtwbx3"><a name="twedtwbx3"><!-- --></a> |
| |
| <h1 class="topictitle1">Working in the Security page</h1> |
| <div><div class="skipspace">In the <b>Security</b> page of the <a href="ccwebxml.html">Web |
| |
| deployment descriptor editor</a>, you can add or remove the names of each defined security role.<p>To work |
| |
| in the <b>Security</b> page, complete the following steps:</p> |
| </div> |
| <ol><li><span>Open a Web project in the Project Explorer.</span></li> |
| <li><span>Double-click the Web project's <b> Deployment Descriptor</b> file |
| |
| in the Project Explorer. The Web deployment descriptor editor opens.</span></li> |
| <li><span>Click the<b> Security</b> tab to open the <b>Security</b> page.</span></li> |
| <li><span>The <b>Security</b> page has the following two sections: </span><ul><li><b>Security Roles</b> - lists and lets you add or remove the security |
| |
| roles defined for this Web application as well as provide a description of |
| |
| each role.</li> |
| <li><b>Security Constraints</b> - lets you add or remove security constraints |
| |
| for specific security roles as well as add descriptions of each security constraint. |
| |
| In addition, you can add or remove Web resources and their HTTP methods, define |
| |
| the security roles who are authorized to access the Web resources, and specify |
| |
| user data constraints on user data: (None, Integral, or Confidential.) None |
| |
| means that the application requires no transport guarantees. Integral means data |
| |
| cannot be changed in transit between client and server. Confidential means |
| |
| data content cannot be observed while it is in transit. These data contraints usually require the |
| |
| use of SSL.</li> |
| </ul> |
| </li> |
| </ol> |
| </div> |
| <div><p><b class="relconceptshd">Related concepts</b><br /> |
| <a href="ccwebxml.html" title="">The Web deployment descriptor editor</a><br /> |
| </p> |
| <p><b class="reltaskshd">Related tasks</b><br /> |
| <a href="../org.eclipse.jst.j2eeapp.doc.user/topics/tjaddsr.html">Defining security roles for enterprise applications</a><br /> |
| <a href="twedtwbx.html" title="">Configuring Web applications using the Web deployment descriptor editor</a><br /> |
| </p> |
| </div> |
| </body> |
| </html> |
