5.4.6. EJB Authorization Policy

Applications can implement custom authentication and authorization verification using a JACC Authorization Module. In JBoss EAP 6.2.2, the JACC authorization module forms part of a JAAS security domain.

When configuring your application-specific security policy, you must declare one (or more) of the following authorization modules in the security domain <policy-module> element.

For specific information relating to configuring the JACCAuthorizationModule or DelegatingAuthorizationModule, refer to the Authentication chapter in the Security Guide.