EJB3 in Action (JTA)

ACID Properties
- Atomicity
- Consistency
- Isolation
- Durability

2-Phase Commit
- for transactions are managed in a distributed environment involving more than one resource

JTA (Java Transaction API)
- Container-Managed Transaction (CMT)
   transaction management with annotations or deployment descriptor

- Bean-Managed Transaction (BMT)
   explicitly manage transactions programmatically


Security
1. Authentication
Authentication is the process of verifying user identity.
2. Authorization
Authorization is the process of determining whether a user has access to a particular resource or tasks.

Users, Groups and Roles

Java EE security is based on JAAS API (Java Authentication and Authorization Service)