Choice between Servlet and EJB 2004-11-23 - By Kurien Joseph
Back
The best way to provide security is store user credentials in a LDAP or
Database security. This allows management user profile and his
authorization and authentication.
Using the Factory design pattern, create a Factory Session bean where
the first call to get Service bean(stateless or stateful) you would pass
in the
User credentials. Use the factory bean to do the authorization and
authentication and return to the user the handle to your priced session
bean.
Hence through this approach you can centralize your security
implementation and have a neat implementation.
-Kurien
-- --Original Message-- --
From: A mailing list for Java(tm) 2 Platform, Enterprise Edition
[mailto:J2EE-INTEREST@(protected)] On Behalf Of Ranjeeth kumar
Sent: Tuesday, November 23, 2004 12:02 PM
To: J2EE-INTEREST@(protected)
Subject: Choice between Servlet and EJB
All-
This is the scenario
Application Server : Weblogic
Webserver : Sun One
Security : SiteMinder SSL with LDAP
I have multiple applications (multiple ear's, different weblogic
instances ) running in the environment. There are many places I need
to share the information between the application's, those are mainly
read operations.
First of all I thought of building "stateless session beans" . But I
got stuck up at security. All my authentication is based on LDAP. And
my security doesn't allow every users to view all information across
system. My services can be accessed either from Web or from non-web
environment (Standalone java program).
What I really need is user authentication before accessing the service
which is really difficult with EJB.
Then I thought of Servlet which will talk to business objects and
return the data. Since the servlet is protected under the websecurity,
there is no way user can access it without authentication.
I know the advantages of EJB, but in this case I am performing read
operations, and it is not of high volume.
Did anyone of u handled this type of situation ? your help and advice
will be really appreciated.
Thanks in advance
=========================================================================To
unsubscribe, send email to listserv@(protected) and include in the
body
of the message "signoff J2EE-INTEREST". For general help, send email to
listserv@(protected) and include in the body of the message "help".
==========================================================================To
unsubscribe, send email to listserv@(protected) and include in the body
of the message "signoff J2EE-INTEREST". For general help, send email to
listserv@(protected) and include in the body of the message "help".
|
|
