Title: Disappointing !
Product review: I am not new to J2EE, but I purchased this book for understanding J2EE security based on the good reviews it has received. I was quite disappointed in this book, which is both repetitive, drawn-out and shallow in its coverage of J2EE as a whole. Although the book covers the basics but it missing the real world complexities such as Single sign-on, JAAS Authentication and Authorisation in J2EE, Integration tier security etc. The book is completely lost in Web services security as it considers only SOAP-RPC security, repeating the similar examples from Axis and Verisign. BTW, This book only covers obsolete versions of Axis, Weblogic and Verisign. As a result almost nothing is covered in great detail, and the ages ultimately provide a dreary drawn-out overview of J2EE security which I find better elsewhere. Now the book stays on the shelf collecting dust, while I google around the Internet for answers.
Would you say this review depicts the product in a flattering or unflattering light?
