User Guide

Using Flash Remoting with JRun security 139
You can use the following ActionScript code to get the value of the LoanInfo bean’s
MonthlyPayment property, or handle a fault condition:
function calculateReturnComplex_Result (re:ResultEvent):Void
{
payOutput.text = re.result.monthlyPayment;
}
function calculateReturnComplex_Fault (fe:FaultEvent):Void
{
mx.remoting.debug.NetDebug.trace({level:"None", message:"There was a
problem" + fe.fault.faultstring});
}
For detailed information about the ActionScript result-handling hierarchy and result-handling
strategies, see Chapter 2, “Handling service results and errors,” on page 43.
Using Flash Remoting with JRun security
You can use the setCredentials() method of the Connection class in ActionScript to
authenticate Flash users to a JRun 4 server and authorize them to access EJBs after they are
authenticated. When a user cannot be authenticated, the default fault handling method on the
client can provide details.
All of the gateway adapters support authentication, but only the EJB adapter supports
authorization. After a user is authenticated, the user’s role is associated with any EJBs the user may
access, and the security permissions established in EJB deployment descriptors (ejb-jar.xml) are
enforced. Only users in specified roles are allowed to access the EJB methods. An error occurs
when the credentials provided through the
setCredentials() method do not map to a user in a
specified role.
The following sections show examples of ActionScript for setting credentials and security settings.
Looking at the ActionScript authentication code
The following example shows ActionScript code that passes a user name and password from a
Flash application to a JRun server:
var con1:Connection = new Connection();
con1.connect("http://examples.macromedia.com/flashservices/gateway/");
con1.setCredentials("Flash", "Flashpass");
Looking at the JRun security settings
The following example shows entries for the user named Flash and a role, FlashRole, to which the
user belongs, using the default security implementation (jrun-users.xml file) for a JRun server:
<user>
<user-name>Flash</user-name>
<password>Flashpass</password>
</user>
<role>
<role-name>FlashRole</role-name>
<user-name>Flash</user-name>
</role>