GSSP-JAVA Web TestEngine Demo

Q41 Multiple choice

You work as a developer for PassGuide Inc. You have implemented a session bean with a method doPrint (), which behaves differently depending on the caller's security role. Only MANAGER in the security roles
"ADMIN" and "MANAGER" are allowed to call the method. Which of the following actions are appropriate to accomplish if there is no security-related metadata in the deployment descriptor?
Each correct answer represents a complete solution. Choose all that apply.

Select all that apply.

A
Annotate method doPrint() with @RolesAllowed({"ADMIN","MANAGER"}).
B
Annotate method doPrint() with @PermitAll.
C
If EJBContext.isCallerInRole("ADMIN") returns true, implement the behavior defined for MANAGER in role "ADMIN".
D
If EJBContext.getCallerPrincipal returns role "ADMIN", implement the behavior for MANAGER in role ADMIN.

GSSP-JAVA Web TestEngine demo