User guide

Developing Java Applications
7-29
Setting Access Permission for Operation Resources
Resources (such as the configuration file and service ID file) are required for Java application operation
and must be securely protected. This section explains how to set access permission to protect these
resources.
The actual setting methods are shown below.
When Servlet Application Uses Business Server Configuration for Specifying an Authentication
Server of the Authentication Destination
Execute a Java application that uses a business server configuration as a user belonging to the
Administrators group.
To read a business server configuration, match an IJServer user with a user specified in the User
directive in the Interstage HTTP Server environment configuration file (httpd.conf).
When Nobody is specified as an IJServer user, set the environment as follows:
1. Use the WorkUnit automatic activation and activate the IJServer with user nobody.
When an IJServer user other than nobody is specified, set the environment as follows:
1. Use the useradd command to create an IJServer user. Grant user authority equivalent to the file
access permission of the user specified in the httpd.conf file User directive to the created user.
2. Set access permission for the created user as explained below.
3. Specify the user in the httpd.conf User directive.
4. Use the Interstage Management Console to select [System] > [Security] > [Single Sign-on] >
[Business system] > [Business system Name] > [Settings] tab and click [Update].(*1)
*1 For further details, refer to “Changing Effective User for Web Server” in Chapter 4 – Operation and
Maintenance.
Setting Access Permission for Files
Use Windows explorer to change user and group access permission. Set access permission as a user
with Administrator authority.