package com.foshanshop.ejb3.impl;

import com.foshanshop.ejb3.SecurityAccess;

import javax.annotation.security.PermitAll;
import javax.annotation.security.RolesAllowed;
import javax.ejb.Remote;
import javax.ejb.Stateless;

@Stateless
@Remote ({SecurityAccess.class})
public class SecurityAccessBean implements SecurityAccess{

    @RolesAllowed({"AdminUser"})
    public String AdminUserMethod() {    
        return "具有管理員角色的用戶才可以訪問AdminUserMethod()方法";
    }

    @RolesAllowed({"DepartmentUser"})
    public String DepartmentUserMethod() {
        return "具有事業部門角色的用戶才可以訪問DepartmentUserMethod()方法";
    }

    @PermitAll
    public String AnonymousUserMethod() {
        return "任何角色的用戶都可以訪問AnonymousUserMethod()方法, 注：用戶必須存在users.properties文件哦";
    }  

}