EJB.15.7 System Administrator s Responsibilities

EJB.15.7 System Administrator's Responsibilities

This section defines the security- related responsibilities of the system administrator. Note that some responsibilities may be carried out by the deployer instead, or may require cooperation of the deployer and the system administrator.

EJB.15.7.1 Security Domain Administration

The system administrator is responsible for the administration of principals. Security domain administration is beyond the scope of the EJB specification.

Typically, the system administrator is responsible for creating a new user account, adding a user to a user group, removing a user from a user group , and removing or freezing a user account.

EJB.15.7.2 Principal Mapping

If the client is in a different security domain than the target enterprise bean, the system administrator is responsible for mapping the principals used by the client to the principals defined for the enterprise bean. The result of the mapping is available to the deployer. The specification of principal mapping techniques is beyond the scope of the EJB architecture.

EJB.15.7.3 Audit Trail Review

If the EJB container provides an audit trail facility, the system administrator is responsible for its management.