The document discusses Java EE security concepts including access control for EJBs and the web tier. It covers defining security roles and permissions using annotations and XML, configuring authentication using JAAS and login modules, and testing access from client code. The goals are to understand Java EE security basics, define an access control policy, and use an authentication provider.

1. Java EE Security

4. Java EE Access Control Points

5. EJB Security

13. Client Authentication JAAS Intro

18. JAAS Login

31. Web Tier Access Control

38. Web Authentication Context Passed to EJB

40. BASIC Authentication

41. Web Subject not Authorized by EJB Tier