Before You Start — Prerequisites

Step 1 — Create the EJB Module Project

If you have forgotten how to create an EJB Module, refer back to Week 5 Lab — Part 2.

• 1
  New Project → Java with Jakarta EE → EJB Module
• 2
  Name the project: W7P1EJBModule
• 3
  Select GlassFish as the server, Jakarta EE 10 as the version.
• 4
  Add the sample source files to your project under au.edu.cqu.week7 package:

  • Book.java and CD.java — entity classes (JPA)
  • ItemEJB.java — the session bean with security annotations
  • ItemLocal.java / ItemRemote.java — local and remote interfaces

Step 2 — Add the GlassFish Descriptor

EJB security roles must be mapped to GlassFish groups using a server-specific descriptor file.

• 1
  Right-click W7P1EJBModule → New → Other…
• 2
  In the New File dialog:
  

  Categories: GlassFish → File Types: GlassFish Descriptor

  Click Next.
• 3
  The wizard shows the file will be created as:
  src/conf/glassfish-ejb-jar.xml
  Click Finish.

Fix — glassfish-ejb-jar.xml Not Visible

This is the same family of issue as when persistence.xml doesn't show in the Projects tab. The file exists on disk — NetBeans just isn't displaying it in that view.

Step 2b — Add Security Role Mappings

Open glassfish-ejb-jar.xml and switch to the Security tab in the editor. Add two role mappings:

<glassfish-ejb-jar>
  <security-role-mapping>
    <role-name>student</role-name>
    <group-name>Enterprise</group-name>
  </security-role-mapping>
  <security-role-mapping>
    <role-name>staff</role-name>
    <group-name>StaffEnterprise</group-name>
  </security-role-mapping>
</glassfish-ejb-jar>

Steps 3–4 — Verify XML & Build

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE glassfish-ejb-jar PUBLIC
  "-//GlassFish.org//DTD GlassFish
   Application Server 3.1...//EN"
   "...">
<glassfish-ejb-jar>
 <security-role-mapping>
  <role-name>student</role-name>
  <group-name>Enterprise</group-name>
 </security-role-mapping>
 <security-role-mapping>
  <role-name>staff</role-name>
  <group-name>StaffEnterprise</group-name>
 </security-role-mapping>
</glassfish-ejb-jar>

BUILD SUCCESSFUL (total time: X seconds)

Step 5a — Create the MySQL Database

Open MySQL Workbench and run the following:

-- Create the database for this project
CREATE DATABASE w7p1db;
USE w7p1db;
-- (Tables will be created automatically by JPA / GlassFish on first run)

Step 5b — JDBC Pool & Data Source in GlassFish

Go to the GlassFish Admin Console at http://localhost:4848

Step 6 — Deploy the EJB Module to GlassFish

Step 7 — Navigate to the GlassFish File Realm

GlassFish's File Realm stores usernames and passwords in a flat file on the server. We use it in development — real systems use database or LDAP realms.

• 1
  Open GlassFish Admin Console: http://localhost:4848
• 2
  In the left tree, navigate to:

  Configurations → server-config → Security → Realms → file
• 3
  Click the file realm to open it, then click Manage Users.

Step 8 — Add Users Mike & Stephen

In File Users → click New and fill in each user:

Understanding the Security Code in ItemEJB

Look at how ItemEJB.java uses security annotations. Here is a simplified version:

@Stateless
@RolesAllowed("student")
public class ItemEJB
    implements ItemRemote,
               ItemLocal {

  // Any student or staff can list
  public List<Book> findAllBooks() {
    return em.createQuery(
      "SELECT b FROM Book b",
       Book.class
    ).getResultList();
  }

  // Only staff can create items
  @RolesAllowed("staff")
  public Book createBook(Book b) {
    em.persist(b);
    return b;
  }
}

Knowledge Check — Lab Part 1

Verification Checklist — Part 1 Complete?

Click each item as you confirm it. All boxes must be ticked before starting Part 2.

• EJB Module project W7P1EJBModule created in NetBeans
• Sample files added: Book.java, CD.java, ItemEJB.java, ItemLocal.java, ItemRemote.java
• GlassFish Descriptor added → src/conf/glassfish-ejb-jar.xml exists (check Files tab)
• Security role mappings added: student → Enterprise and staff → StaffEnterprise
• Project builds successfully with BUILD SUCCESSFUL
• MySQL database w7p1db created
• GlassFish JDBC pool W7P1Pool created and Ping succeeds
• GlassFish JDBC data source jdbc/W7P1DS created
• EJB Module deployed to GlassFish — visible under Applications
• GlassFish File Realm user Mike in group Enterprise created
• GlassFish File Realm user Stephen in group StaffEnterprise created

What's Next — Part 2