Summary

Today, you learned the concepts and mechanisms of J2EE security, and how to apply both programmatic and declarative approaches. J2EE emphasizes a role-based, declarative security mechanism that can be propagated from one component to another, or across multiple tiers and multiple J2EE application servers. This container-managed and cost-effective approach increases the flexibility and portability of deploying secure enterprise applications. You also explored the JAAS security API as the forthcoming standard for authentication and authorization.