Oracle
1Z0-860 · Question #259
A developer implements a session bean which acts as a session facade for an application. This means that clients will only see this session bean's interface which offers the application interface…
The correct answer is D. The developer annotates the bean class with @RolesAllowed("user") and annotates the methods used E. The developer defines a method permission with method name "*" and role "user" and adds individual. See the full explanation below for the reasoning.
Question
A developer implements a session bean which acts as a session facade for an application. This means that clients will only see this session bean's interface which offers the application interface. There are three distinct roles known at development time"user", "admin", and "guest". The majority of the methods will be used by role "user". All methods must have role permissions active and roles may be added or changed in the future. Which two scenarios are correct? (Choose two.)
Options
- AThe developer annotates the bean class with @PermitAII and annotates the methods used by role
- BThe developer annotates the bean class with @DenyAII and annotates the methods used by role "user",
- CThe developer defines individual method permissions for the methods used by roles "user", "guest", and
- DThe developer annotates the bean class with @RolesAllowed("user") and annotates the methods used
- EThe developer defines a method permission with method name "*" and role "user" and adds individual
How the community answered
(37 responses)- A5% (2)
- B5% (2)
- C14% (5)
- D76% (28)
Community Discussion
No community discussion yet for this question.