Testing the Access Protection 

Use

You can now test the new authorization assignments. As in the previous section of the tutorial, the users Agent and Pr_Agent are able to create and maintain reservations, while Employee does not have the appopriate permissions. However, instead of receiving an error message, in this test, the input fields are set to read-only and the functions for creating or displaying reservations are not available.

Prerequisites

	The AS Java is running.
	You have completed the tutorial steps and assigned the roles to the users.

Procedure

...

       1.      Close any open Web browsers.

       2.      Start the Web Dynpro application. Either choose Run from the context menu for the CarRentalApp in the Developer Studio or enter the URL for the application directly in the Web browser.

http://localhost:50000/webdynpro/dispatcher/local/TutWD_CarRental/CarRentalApp

You receive a logon screen.

       3.      Logon as each of the users and attempt to maintain reservations.

To make sure you obtain a new session for each user, close the Web browser between the tests for the different users.

Result

Agent and Pr_Agent should be able to maintain reservations as in the previous section of the tutorial. Employee should receive the initial screen for the application but all input fields should be set to read-only and the functions for creating or displaying reservations should not be visible.

You have protected access to the quick car rental application using UME permissions, actions and roles.

You are now finished with this tutorial.

If you want to see how to use J2EE security roles to protect access to the J2EE-based quick car rental application, see Protecting Access to a J2EE-Based Application Using J2EE Security Roles.

If you want to see how to use UME permissions to protect access to the J2EE-based quick car rental application, see Protecting Access to a J2EE-Based Application Using UME Permissions.