Question about security role.

[rui lin]

Hi,
I've defined a security role name 'Employees' in the descriptor file.
like

  <security-role>
            <role-name>Employees</role-name>
        </security-role>
        <method-permission>
            <role-name>Employees</role-name>
            <method>
                <ejb-name>CustomerEJB</ejb-name>
                <method-name>*</method-name>
            </method>
        </method-permission>

This means only the client who is an employee can access the methods,i think.
My question is: in the client codes, how can i claim myself to be an employee. would you give me some example codes?

[Lasse Koskela]

The client authenticates when she acquires the InitialContext reference to the application server's JNDI tree. Based on the principal identified during that authentication, the EJB container deduces whether the caller is in the appropriate role or not.