Web Services authorizations

[Former Member]

Hi Experts,

I am new to web service development, I have developed a web service that creates UME users, and succesfully tested it through the Web Service Navigator.

I have added the User/ID HTTP authentication to the service:

and now I am receiving a "user / password " pop up when testing the service, this is ok, but I have discovered that entering "any" valid user/password combination is enough to execute the service...

What should I do in order to let only users with certain roles to execute the service??

best regards,

Marco.

[Former Member · Accepted solution]

well, I will auto-answer my question, role-based authorizations are achieved using the @RolesAllowed notation in the EJB definition.

regards

Marco.