Deployment descriptor reference - EJB 3 in Action - page 629

Table A.4. Tag to configure <security-role>

Tag name Description

The name of the security role. Example: @DeclareRoles({"Admin",
"User"}).

role-name

<method-permission>

The <method-permission> tag is used to define what roles are allowed to execute
which EJB methods:

<ejb-jar...>
<assembly-descriptor>
<method-permission>...</method-permission>
</assembly-descriptor>
</ejb-jar>

The corresponding annotation is @RolesAllowed . Table A.5 describes the tags to con-
figure <method-permission> .

Table A.5. Tags to configure <method-permission>

Tag name Description

Name of the roll allowed to execute the method. This or unchecked
may be used but not both.

role-name

Specifies that all roles are allowed to execute the method. This or
role-name may be used but not both.

unchecked

Specifies the name of the EJB (as specified in <session><ebj-name>)
and the name of the method to secure.

method

<container-transaction>

The <container-transaction> tag is used to define transaction settings for EJB
methods:

<ejb-jar...>
<assembly-descriptor>
<container-transaction>...</container-transaction>
</assembly-descriptor>
</ejb-jar>

The corresponding annotation is @TransactionAttribute . Table A.6 describes the
tags to configure <container-transaction> .