There are tow basic EJB components. Entity Bean and Session Bean. Resources includes all JSPs, Servlets, EJBs, images, javascripts, style sheets, and etc. So user can t use any of these components without authentication and authorization. Authentication is a process to verify a user.
Authorization is a process to define access roles.
This POS application project implements only authentication for the purpose of web usage so far. If this service is used in application, this application is not potable because JRun added this service. Especially Jrun includes its own scheduling mechanism to schedule a batched jobs. That scheduling method is defined as allaire.jrun.scheduler.CronService . This CronService servlet reads scheduler.ini file to be defined web.xml.