4 To create the second rule in the policy, click New.
5 To create a generic deny rule, assign a deny action, then click OK. Your rule should look
similar to the following:
6 To save your employee policy, click OK > Apply Changes.
7 To create a policy for the managers, click New, specify a name for the policy, select J2EE
Agent: EJB Authorization as the type, then click OK.
8 For the first rule, click New, set up a condition that permits access if the user has been assigned
the Manager role, then click OK. Your rule should look similar to the following:
Deploying the Sample Payroll Application 101