S E C U R I T Y  

 Standard Stateless SessionBean  is the default configuration used for stateless 

session beans in the absence of a configuration override declaration. The value of 

the security domain element here is defining that the JAAS login configuration 

named  spec test  will be executed to authentication principals attempting to 

access stateless session beans. The  java:/jaas/  prefix is a naming convention that 

is supported by the JaasSecurityManagerService MBean to dynamically create 

security managers for domains. 

17. 

Here BMP entity beans are also declared to be security by default since  Standard 

BMP EntityBean  is the default configuration name for BMP entity beans. 

18. 

The  Unsecure Stateless SessionBean  configuration declaration is defining an 

extension of the  Standard Stateless SessionBean  configuration that overrides 

the security domain to null and thus disables security for beans that use this 

configuration. 

19. 

The EJB named  UnsecureStatelessSession  is declaring that the  Unsecure 

Stateless SessionBean  container configuration be used for its instances. 

Therefore, security is not used with UnsecureStatelessSessions. 

81