Java / Servlet Interview Questions
Methods of Java EE container security.
In Java EE, the component containers are responsible for providing application security. A container provides two types of security: declarative and programmatic.
Declarative security is the preferred method, which expresses application security requirements via configuration parameters found in the application servers web.xml configuration file. Also, Annotations can be used in the code.
In programmatic policy enforcements, to check authentication/authorization you may have to call isUserInRole() every time you need to execute a particular function. This is okay for small scale applications but not for large enterprise-scale applications.
More Related questions...
