Given that a web service endpoint is based on the stateless session EJB:
Which is true about the security roles of clients of MrBean? (Choose one)
A.
Only EJB clients must be in role A.
B.
Only Web Service clients must be in role A.
C.
Both EJB and web service clients must be in role A.
D.
Both EJB and web service clients must NOT be in role A.
don’t think it’s a good question: part of them is enlisted into the web.xml, other of them is enlisted into the ejb-jar.xml. The former is for the web service client, the latter is for the EJB client.
Answer is C?
is good question,
the file ejb-jar.xml method-permission applies what roles can invoke the method Independent of the client, then this configuration applies for client ejb or client web service.
now the file web.xml Also serves to assign the role to client webservice
Answer correct is C