5.4.6. EJB Authorization Policy

Applications can implement custom authentication and authorization verification using a JACC Authorization Module. In JBoss EAP 6.2.2, the JACC authorization module forms part of a JAAS security domain.
When configuring your application-specific security policy, you must declare one (or more) of the following authorization modules in the security domain <policy-module> element.
  • code=Delegating
  • code=JACC
For specific information relating to configuring the JACCAuthorizationModule or DelegatingAuthorizationModule, refer to the Authentication chapter in the Security Guide.