The User Security Managerment System Based On J2EE

J2EE has attracted more and more attentions for its flexibility, maintenability and security, in J2EE, the container can perform the access right relation to the role by configer file (web.xml and ejb-jar.xml).the application developer must finish the user's application code relation to the role by the database system based on the database or LDAP(Lightweight Directory Access Protocal).The paper introduce the application of security management via security frame to J2EE and analyses deeply how the J2EE container perform the access control based on the role and how the programming codes finish the user manager system based on the database.In a word, The paper introduce that how to apply security service provided by J2EE from the user information manager,the Authentication and Authorization to rights and restrainability of access control source.