You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tomee.apache.org by db...@apache.org on 2008/03/09 08:27:47 UTC
svn commit: r635180 - in /openejb/trunk/openejb3/examples: ./
testing-security/ testing-security/src/ testing-security/src/main/
testing-security/src/main/java/ testing-security/src/main/java/org/
testing-security/src/main/java/org/superbiz/ testing-se...
Author: dblevins
Date: Sat Mar 8 23:27:45 2008
New Revision: 635180
URL: http://svn.apache.org/viewvc?rev=635180&view=rev
Log:
Example of testing security
Added:
openejb/trunk/openejb3/examples/testing-security/
openejb/trunk/openejb3/examples/testing-security/build.xml
openejb/trunk/openejb3/examples/testing-security/pom.xml
openejb/trunk/openejb3/examples/testing-security/src/
openejb/trunk/openejb3/examples/testing-security/src/main/
openejb/trunk/openejb3/examples/testing-security/src/main/java/
openejb/trunk/openejb3/examples/testing-security/src/main/java/org/
openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/
openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/
openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/
openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/Movie.java
openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/Movies.java
openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/MoviesImpl.java
openejb/trunk/openejb3/examples/testing-security/src/main/resources/
openejb/trunk/openejb3/examples/testing-security/src/main/resources/META-INF/
openejb/trunk/openejb3/examples/testing-security/src/main/resources/META-INF/ejb-jar.xml
openejb/trunk/openejb3/examples/testing-security/src/main/resources/META-INF/persistence.xml
openejb/trunk/openejb3/examples/testing-security/src/test/
openejb/trunk/openejb3/examples/testing-security/src/test/java/
openejb/trunk/openejb3/examples/testing-security/src/test/java/org/
openejb/trunk/openejb3/examples/testing-security/src/test/java/org/superbiz/
openejb/trunk/openejb3/examples/testing-security/src/test/java/org/superbiz/injection/
openejb/trunk/openejb3/examples/testing-security/src/test/java/org/superbiz/injection/secure/
openejb/trunk/openejb3/examples/testing-security/src/test/java/org/superbiz/injection/secure/MovieTest.java
openejb/trunk/openejb3/examples/testing-security/src/test/resources/
openejb/trunk/openejb3/examples/testing-security/src/test/resources/META-INF/
openejb/trunk/openejb3/examples/testing-security/src/test/resources/META-INF/ejb-jar.xml
Modified:
openejb/trunk/openejb3/examples/pom.xml
Modified: openejb/trunk/openejb3/examples/pom.xml
URL: http://svn.apache.org/viewvc/openejb/trunk/openejb3/examples/pom.xml?rev=635180&r1=635179&r2=635180&view=diff
==============================================================================
--- openejb/trunk/openejb3/examples/pom.xml (original)
+++ openejb/trunk/openejb3/examples/pom.xml Sat Mar 8 23:27:45 2008
@@ -39,6 +39,7 @@
<module>injection-of-datasource</module>
<module>injection-of-entitymanager</module>
<module>testing-transactions</module>
+ <module>testing-security</module>
<module>interceptors</module>
<module>expanded-env-entries</module>
<module>helloworld-weblogic</module>
Added: openejb/trunk/openejb3/examples/testing-security/build.xml
URL: http://svn.apache.org/viewvc/openejb/trunk/openejb3/examples/testing-security/build.xml?rev=635180&view=auto
==============================================================================
--- openejb/trunk/openejb3/examples/testing-security/build.xml (added)
+++ openejb/trunk/openejb3/examples/testing-security/build.xml Sat Mar 8 23:27:45 2008
@@ -0,0 +1,121 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+
+ Licensed to the Apache Software Foundation (ASF) under one or more
+ contributor license agreements. See the NOTICE file distributed with
+ this work for additional information regarding copyright ownership.
+ The ASF licenses this file to You under the Apache License, Version 2.0
+ (the "License"); you may not use this file except in compliance with
+ the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+-->
+
+<!-- $Rev: 607077 $ $Date: 2007-12-27 06:55:23 -0800 (Thu, 27 Dec 2007) $ -->
+
+<project name="MyProject" default="dist" basedir="." xmlns:artifact="antlib:org.apache.maven.artifact.ant">
+
+ <!-- ===============================================================
+
+ HOW TO RUN
+
+ Download http://www.apache.org/dist/maven/binaries/maven-ant-tasks-2.0.7.jar
+ Then execute ant as follows:
+
+ ant -lib maven-ant-tasks-2.0.7.jar
+
+ NOTE
+
+ You do NOT need maven-ant-tasks-2.0.7.jar to use OpenEJB for embedded EJB
+ testing with Ant. It is simply used in this example to make the build.xml
+ a bit simpler. As long as OpenEJB and it's required libraries are in the
+ <junit> classpath, the tests will run with OpenEJB embedded.
+
+ ================================================================= -->
+
+ <artifact:remoteRepository id="apache.snapshot.repository" url="http://people.apache.org/repo/m2-snapshot-repository/" />
+ <artifact:remoteRepository id="m2.repository" url="http://repo1.maven.org/maven2/" />
+
+ <!-- Build Classpath -->
+ <artifact:dependencies pathId="classpath.main">
+ <dependency groupId="org.apache.geronimo.specs" artifactId="geronimo-ejb_3.0_spec" version="1.0"/>
+ <dependency groupId="org.apache.geronimo.specs" artifactId="geronimo-jpa_3.0_spec" version="1.0"/>
+ <dependency groupId="org.apache.geronimo.specs" artifactId="geronimo-annotation_1.0_spec" version="1.0"/>
+ </artifact:dependencies>
+
+ <!-- Test Build Classpath -->
+ <artifact:dependencies pathId="classpath.test.build">
+ <dependency groupId="junit" artifactId="junit" version="4.3.1"/>
+ </artifact:dependencies>
+
+ <!-- Test Run Classpath -->
+ <artifact:dependencies pathId="classpath.test.run">
+ <remoteRepository refid="apache.snapshot.repository" />
+ <remoteRepository refid="m2.repository" />
+
+ <dependency groupId="org.apache.openejb" artifactId="openejb-core" version="3.0.0-SNAPSHOT"/>
+ <dependency groupId="junit" artifactId="junit" version="4.3.1"/>
+ </artifact:dependencies>
+
+ <!-- Properties -->
+
+ <property name="src.main.java" location="src/main/java"/>
+ <property name="src.main.resources" location="src/main/resources"/>
+ <property name="src.test.java" location="src/test/java"/>
+ <property name="build.main" location="target/classes"/>
+ <property name="build.test" location="target/test-classes"/>
+ <property name="test.reports" location="target/test-reports"/>
+ <property name="dist" location="target"/>
+
+
+ <target name="init">
+ <mkdir dir="${build.main}"/>
+ <mkdir dir="${build.test}"/>
+ <mkdir dir="${test.reports}"/>
+ </target>
+
+ <target name="compile" depends="init">
+
+ <javac srcdir="${src.main.java}" destdir="${build.main}">
+ <classpath refid="classpath.main" />
+ </javac>
+ <copy todir="${build.main}">
+ <fileset dir="${src.main.resources}"/>
+ </copy>
+
+ <javac srcdir="${src.test.java}" destdir="${build.test}">
+ <classpath location="${build.main}"/>
+ <classpath refid="classpath.main"/>
+ <classpath refid="classpath.test.build"/>
+ </javac>
+ </target>
+
+ <target name="test" depends="compile">
+ <junit fork="yes" printsummary="yes">
+ <classpath location="${build.main}"/>
+ <classpath location="${build.test}"/>
+ <classpath refid="classpath.main"/>
+ <classpath refid="classpath.test.build"/>
+ <classpath refid="classpath.test.run"/>
+
+ <formatter type="plain"/>
+
+ <batchtest fork="yes" todir="${test.reports}">
+ <fileset dir="${src.test.java}">
+ <include name="**/*Test.java"/>
+ </fileset>
+ </batchtest>
+ </junit>
+ </target>
+
+ <target name="dist" depends="test">
+ <jar jarfile="${dist}/myproject-1.0.jar" basedir="${build.main}"/>
+ </target>
+
+</project>
Added: openejb/trunk/openejb3/examples/testing-security/pom.xml
URL: http://svn.apache.org/viewvc/openejb/trunk/openejb3/examples/testing-security/pom.xml?rev=635180&view=auto
==============================================================================
--- openejb/trunk/openejb3/examples/testing-security/pom.xml (added)
+++ openejb/trunk/openejb3/examples/testing-security/pom.xml Sat Mar 8 23:27:45 2008
@@ -0,0 +1,60 @@
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+ <modelVersion>4.0.0</modelVersion>
+ <groupId>org.superbiz</groupId>
+ <artifactId>testing-security</artifactId>
+ <packaging>jar</packaging>
+ <version>1.0-SNAPSHOT</version>
+ <name>OpenEJB :: Examples :: Testing Security</name>
+ <build>
+ <defaultGoal>install</defaultGoal>
+ <plugins>
+ <plugin>
+ <artifactId>maven-compiler-plugin</artifactId>
+ <configuration>
+ <source>1.5</source>
+ <target>1.5</target>
+ </configuration>
+ </plugin>
+ <plugin>
+ <groupId>org.apache.maven.plugins</groupId>
+ <artifactId>maven-surefire-plugin</artifactId>
+ <configuration>
+ <forkMode>pertest</forkMode>
+ </configuration>
+ </plugin>
+ </plugins>
+ </build>
+ <repositories>
+ <repository>
+ <id>apache-m2-snapshot</id>
+ <name>Apache Snapshot Repository</name>
+ <url>http://people.apache.org/repo/m2-snapshot-repository/</url>
+ </repository>
+ </repositories>
+ <dependencies>
+ <dependency>
+ <groupId>org.apache.openejb</groupId>
+ <artifactId>javaee-api</artifactId>
+ <version>5.0-1</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>junit</groupId>
+ <artifactId>junit</artifactId>
+ <version>4.1</version>
+ <scope>test</scope>
+ </dependency>
+
+ <!--
+ The <scope>test</scope> guarantees that non of your runtime
+ code is dependent on any OpenEJB classes.
+ -->
+ <dependency>
+ <groupId>org.apache.openejb</groupId>
+ <artifactId>openejb-core</artifactId>
+ <version>3.0-SNAPSHOT</version>
+ <scope>test</scope>
+ </dependency>
+
+ </dependencies>
+</project>
\ No newline at end of file
Added: openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/Movie.java
URL: http://svn.apache.org/viewvc/openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/Movie.java?rev=635180&view=auto
==============================================================================
--- openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/Movie.java (added)
+++ openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/Movie.java Sat Mar 8 23:27:45 2008
@@ -0,0 +1,62 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.superbiz.injection.secure;
+
+import javax.persistence.Entity;
+
+@Entity
+public class Movie {
+
+ private String director;
+ private String title;
+ private int year;
+
+ public Movie() {
+ }
+
+ public Movie(String director, String title, int year) {
+ this.director = director;
+ this.title = title;
+ this.year = year;
+ }
+
+ public String getDirector() {
+ return director;
+ }
+
+ public void setDirector(String director) {
+ this.director = director;
+ }
+
+ public String getTitle() {
+ return title;
+ }
+
+ public void setTitle(String title) {
+ this.title = title;
+ }
+
+ public int getYear() {
+ return year;
+ }
+
+ public void setYear(int year) {
+ this.year = year;
+ }
+
+
+}
Added: openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/Movies.java
URL: http://svn.apache.org/viewvc/openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/Movies.java?rev=635180&view=auto
==============================================================================
--- openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/Movies.java (added)
+++ openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/Movies.java Sat Mar 8 23:27:45 2008
@@ -0,0 +1,32 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.superbiz.injection.secure;
+
+import org.superbiz.injection.secure.Movie;
+
+import java.util.List;
+
+/**
+ * @version $Revision: 607077 $ $Date: 2007-12-27 06:55:23 -0800 (Thu, 27 Dec 2007) $
+ */
+public interface Movies {
+ void addMovie(Movie movie) throws Exception ;
+
+ void deleteMovie(Movie movie) throws Exception ;
+
+ List<Movie> getMovies() throws Exception ;
+}
Added: openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/MoviesImpl.java
URL: http://svn.apache.org/viewvc/openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/MoviesImpl.java?rev=635180&view=auto
==============================================================================
--- openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/MoviesImpl.java (added)
+++ openejb/trunk/openejb3/examples/testing-security/src/main/java/org/superbiz/injection/secure/MoviesImpl.java Sat Mar 8 23:27:45 2008
@@ -0,0 +1,52 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.superbiz.injection.secure;
+
+import javax.annotation.security.PermitAll;
+import javax.annotation.security.RolesAllowed;
+import javax.ejb.Stateful;
+import javax.ejb.TransactionAttribute;
+import javax.ejb.TransactionAttributeType;
+import javax.persistence.EntityManager;
+import javax.persistence.PersistenceContext;
+import javax.persistence.PersistenceContextType;
+import javax.persistence.Query;
+import java.util.List;
+
+@Stateful(name = "Movies")
+public class MoviesImpl implements Movies {
+
+ @PersistenceContext(unitName = "movie-unit", type = PersistenceContextType.EXTENDED)
+ private EntityManager entityManager;
+
+ @RolesAllowed({"Employee", "Manager"})
+ public void addMovie(Movie movie) throws Exception {
+ entityManager.persist(movie);
+ }
+
+ @RolesAllowed({"Manager"})
+ public void deleteMovie(Movie movie) throws Exception {
+ entityManager.remove(movie);
+ }
+
+ @PermitAll
+ @TransactionAttribute(TransactionAttributeType.SUPPORTS)
+ public List<Movie> getMovies() throws Exception {
+ Query query = entityManager.createQuery("SELECT m from Movie as m");
+ return query.getResultList();
+ }
+}
Added: openejb/trunk/openejb3/examples/testing-security/src/main/resources/META-INF/ejb-jar.xml
URL: http://svn.apache.org/viewvc/openejb/trunk/openejb3/examples/testing-security/src/main/resources/META-INF/ejb-jar.xml?rev=635180&view=auto
==============================================================================
--- openejb/trunk/openejb3/examples/testing-security/src/main/resources/META-INF/ejb-jar.xml (added)
+++ openejb/trunk/openejb3/examples/testing-security/src/main/resources/META-INF/ejb-jar.xml Sat Mar 8 23:27:45 2008
@@ -0,0 +1 @@
+<ejb-jar/>
Added: openejb/trunk/openejb3/examples/testing-security/src/main/resources/META-INF/persistence.xml
URL: http://svn.apache.org/viewvc/openejb/trunk/openejb3/examples/testing-security/src/main/resources/META-INF/persistence.xml?rev=635180&view=auto
==============================================================================
--- openejb/trunk/openejb3/examples/testing-security/src/main/resources/META-INF/persistence.xml (added)
+++ openejb/trunk/openejb3/examples/testing-security/src/main/resources/META-INF/persistence.xml Sat Mar 8 23:27:45 2008
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+
+ Licensed to the Apache Software Foundation (ASF) under one or more
+ contributor license agreements. See the NOTICE file distributed with
+ this work for additional information regarding copyright ownership.
+ The ASF licenses this file to You under the Apache License, Version 2.0
+ (the "License"); you may not use this file except in compliance with
+ the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+-->
+<persistence xmlns="http://java.sun.com/xml/ns/persistence" version="1.0">
+
+ <persistence-unit name="movie-unit">
+ <jta-data-source>movieDatabase</jta-data-source>
+ <non-jta-data-source>movieDatabaseUnmanaged</non-jta-data-source>
+ <class>org.superbiz.injection.secure.Movie</class>
+
+ <properties>
+ <property name="openjpa.jdbc.SynchronizeMappings" value="buildSchema(ForeignKeys=true)"/>
+ </properties>
+ </persistence-unit>
+</persistence>
\ No newline at end of file
Added: openejb/trunk/openejb3/examples/testing-security/src/test/java/org/superbiz/injection/secure/MovieTest.java
URL: http://svn.apache.org/viewvc/openejb/trunk/openejb3/examples/testing-security/src/test/java/org/superbiz/injection/secure/MovieTest.java?rev=635180&view=auto
==============================================================================
--- openejb/trunk/openejb3/examples/testing-security/src/test/java/org/superbiz/injection/secure/MovieTest.java (added)
+++ openejb/trunk/openejb3/examples/testing-security/src/test/java/org/superbiz/injection/secure/MovieTest.java Sat Mar 8 23:27:45 2008
@@ -0,0 +1,166 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.superbiz.injection.secure;
+
+import junit.framework.TestCase;
+
+import javax.annotation.security.RunAs;
+import javax.ejb.EJBAccessException;
+import javax.ejb.Stateless;
+import javax.naming.Context;
+import javax.naming.InitialContext;
+import java.util.List;
+import java.util.Properties;
+import java.util.concurrent.Callable;
+
+/**
+ * @version $Revision: 607077 $ $Date: 2007-12-27 06:55:23 -0800 (Thu, 27 Dec 2007) $
+ */
+public class MovieTest extends TestCase {
+ private Context context;
+
+ protected void setUp() throws Exception {
+ Properties p = new Properties();
+ p.put(Context.INITIAL_CONTEXT_FACTORY, "org.apache.openejb.client.LocalInitialContextFactory");
+ p.put("movieDatabase", "new://Resource?type=DataSource");
+ p.put("movieDatabase.JdbcDriver", "org.hsqldb.jdbcDriver");
+ p.put("movieDatabase.JdbcUrl", "jdbc:hsqldb:mem:moviedb");
+
+ p.put("movieDatabaseUnmanaged", "new://Resource?type=DataSource");
+ p.put("movieDatabaseUnmanaged.JdbcDriver", "org.hsqldb.jdbcDriver");
+ p.put("movieDatabaseUnmanaged.JdbcUrl", "jdbc:hsqldb:mem:moviedb");
+ p.put("movieDatabaseUnmanaged.JtaManaged", "false");
+
+ context = new InitialContext(p);
+ }
+
+ public void testAsManager() throws Exception {
+ Caller managerBean = (Caller) context.lookup("ManagerBeanLocal");
+ managerBean.call(new Callable() {
+ public Object call() throws Exception {
+
+ Movies movies = (Movies) context.lookup("MoviesLocal");
+
+ movies.addMovie(new Movie("Quentin Tarantino", "Reservoir Dogs", 1992));
+ movies.addMovie(new Movie("Joel Coen", "Fargo", 1996));
+ movies.addMovie(new Movie("Joel Coen", "The Big Lebowski", 1998));
+
+ List<Movie> list = movies.getMovies();
+ assertEquals("List.size()", 3, list.size());
+
+ for (Movie movie : list) {
+ movies.deleteMovie(movie);
+ }
+
+ assertEquals("Movies.getMovies()", 0, movies.getMovies().size());
+ return null;
+ }
+ });
+ }
+
+ public void testAsEmployee() throws Exception {
+ Caller employeeBean = (Caller) context.lookup("EmployeeBeanLocal");
+ employeeBean.call(new Callable() {
+ public Object call() throws Exception {
+ Movies movies = (Movies) context.lookup("MoviesLocal");
+
+ movies.addMovie(new Movie("Quentin Tarantino", "Reservoir Dogs", 1992));
+ movies.addMovie(new Movie("Joel Coen", "Fargo", 1996));
+ movies.addMovie(new Movie("Joel Coen", "The Big Lebowski", 1998));
+
+ List<Movie> list = movies.getMovies();
+ assertEquals("List.size()", 3, list.size());
+
+ for (Movie movie : list) {
+ try {
+ movies.deleteMovie(movie);
+ fail("Employees should not be allowed to delete");
+ } catch (EJBAccessException e) {
+ // Good, Employees cannot delete things
+ }
+ }
+
+ // The list should still be three movies long
+ assertEquals("Movies.getMovies()", 3, movies.getMovies().size());
+ return null;
+ }
+ });
+ }
+
+ public void testUnauthenticated() throws Exception {
+ Movies movies = (Movies) context.lookup("MoviesLocal");
+
+ try {
+ movies.addMovie(new Movie("Quentin Tarantino", "Reservoir Dogs", 1992));
+ fail("Unauthenticated users should not be able to add movies");
+ } catch (EJBAccessException e) {
+ // Good, guests cannot add things
+ }
+
+ try {
+ movies.deleteMovie(null);
+ fail("Unauthenticated users should not be allowed to delete");
+ } catch (EJBAccessException e) {
+ // Good, Unauthenticated users cannot delete things
+ }
+
+ try {
+ // Read access should be allowed
+
+ List<Movie> list = movies.getMovies();
+
+ } catch (EJBAccessException e) {
+ fail("Read access should be allowed");
+ }
+
+ }
+
+
+ public static interface Caller {
+ public <V> V call(Callable<V> callable) throws Exception;
+ }
+
+ /**
+ * This little bit of magic allows our test code to execute in
+ * the scope.
+ * <p/>
+ * The src/test/resource/META-INF/ejb-jar.xml will cause this
+ * EJB to be automatically discovered and deployed when
+ * OpenEJB boots up.
+ */
+
+ @Stateless
+ @RunAs("Manager")
+ public static class ManagerBean implements Caller {
+
+ public <V> V call(Callable<V> callable) throws Exception {
+ return callable.call();
+ }
+
+ }
+
+ @Stateless
+ @RunAs("Employee")
+ public static class EmployeeBean implements Caller {
+
+ public <V> V call(Callable<V> callable) throws Exception {
+ return callable.call();
+ }
+
+ }
+
+}
Added: openejb/trunk/openejb3/examples/testing-security/src/test/resources/META-INF/ejb-jar.xml
URL: http://svn.apache.org/viewvc/openejb/trunk/openejb3/examples/testing-security/src/test/resources/META-INF/ejb-jar.xml?rev=635180&view=auto
==============================================================================
--- openejb/trunk/openejb3/examples/testing-security/src/test/resources/META-INF/ejb-jar.xml (added)
+++ openejb/trunk/openejb3/examples/testing-security/src/test/resources/META-INF/ejb-jar.xml Sat Mar 8 23:27:45 2008
@@ -0,0 +1,2 @@
+<!-- this is here so the ejbs in the test code are discovered and deployed -->
+<ejb-jar/>
\ No newline at end of file