Sagewire Logo

Application permissions module

4 Message(s) by 2 Author(s) originally posted in java security


From: k.adamczyk Date:   Tuesday, August 28, 2007
Hi,

I am writting a new application using Eclipse RCP and GlassFish.
One of the application's module s is a permissions module that lets the
administrator
assign rights (permissions) to the users. Then the assigned permissions will
have influence
on enabling/disabling menu options, buttons etc.
I'll be grateful for some advice what technology should I use (JAAS,
aspect programming, ...).
I do not want to mix the permission-checking code with the application-logic
code.

Greetings,
Chris


From: Edward Feustel Date:   Tuesday, August 28, 2007
Hi,
I am writting a new application using Eclipse RCP and GlassFish.
One of the application's modules is a permissions module that lets the
administrator
assign rights (permissions) to the users. Then the assigned permissions
will have influence
on enabling/disabling menu options, buttons etc.
I'll be grateful for some advice what technology should I use (JAAS,
aspect programming, ...).
I do not want to mix the permission-checking code with the
application-logic code.
Greetings,
Chris
Chris,


You might want to look at Sun's XACML on source forge. Then write a
policy enforcement module that interprets the credentials the application
provides
(probably authenticated using SAML) against the XML SAML policy and says yes
or no to the authorization request.
Ed Feustel


From: k.adamczyk Date:   Thursday, August 30, 2007
Dear Ed,

Many thanks for your reply.
I have not ever heard about XACML. Is it commonly used?
The sourceforge site of this project has been modified more than a year ago
the last time. Is not this project outdated?
Do not get me wrong, I'm just trying to make a good decision and
I'm gathering arguments :)

Best regards,
ChrisU¿ytkownik "Edward Feustel" <efeustel@xxxxxxxxxxx> napisa³ w wiadomo¶ci

Hi,

I am writting a new application using Eclipse RCP and GlassFish.
One of the application's modules is a permissions module that lets the
administrator
assign rights (permissions) to the users. Then the assigned permissions
will have influence
on enabling/disabling menu options, buttons etc.
I'll be grateful for some advice what technology should I use (JAAS,
aspect programming, ...).
I do not want to mix the permission-checking code with the
application-logic code.

Greetings,
Chris

Chris,
You might want to look at Sun's XACML on sourceforge. Then write a
policy enforcement module that interprets the credentials the application
provides
(probably authenticated using SAML) against the XML SAML policy and says
yes or no to the authorization request.
Ed Feustel





From: Edward Feustel Date:   Friday, August 31, 2007
Dear Ed,
Many thanks for your reply.
I have not ever heard about XACML. Is it commonly used?
The sourceforge site of this project has been modified more than a year
ago
the last time. Is not this project outdated?
Do not get me wrong, I'm just trying to make a good decision and
I'm gathering arguments :)
Best regards,
Chris
U¿ytkownik "Edward Feustel" <efeustel@xxxxxxxxxxx> napisa³ w wiadomo¶ci


Hi,
I am writting a new application using Eclipse RCP and GlassFish.
One of the application's modules is a permissions module that lets the
administrator
assign rights (permissions) to the users. Then the assigned permissions
will have influence
on enabling/disabling menu options, buttons etc.
I'll be grateful for some advice what technology should I use (JAAS,
aspect programming, ...).
I do not want to mix the permission-checking code with the
application-logic code.
Greetings,
Chris
Chris,
You might want to look at Sun's XACML on sourceforge. Then write a
policy enforcement module that interprets the credentials the application
provides
(probably authenticated using SAML) against the XML SAML policy and says
yes or no to the authorization request.
Ed Feustel



Chris,
I am not positive about where the XACML standard is these days.
I'd suggest that you contact the OASIS. OASIS is the consortium
that is handling XACML and SAML and is attempting to encourage the
implementation of PKI .

The first set of modifications was done to permit integration with a later
version of SAML.
You might want to contact contributors on Source Forge to determine whether
their JAVA
XACML demo has been updated. I am fairly certain that newer version of SAML
has
been implemented. I believe that Shibboleth, a middleware authorization
system, and SIGNET, a middleware privilege management system, use it.

If I can find some students at Dartmouth, I'd hope we can build a
new Policy Decision Process(PDP ) and a new Policy Enforcement Process (PEP)
that will be usable in a distributed system. Ideally, the PDP will permit
retrieving decisions from other PDPs (using SAML) and the PEP will use
decisions
from the master PDP (using SAML). This will require a PKI in place, but
Dartmouth has one.

If you find that there are missing pieces, please let me know!
Thanks,
Ed



Next Message: jarsigner question


Blogs related to Application permissions module

400+ Online Resources...
Mobispine – Mobispine is a free Java application for reading your feeds on your mobile. The service also includes a web component where users can add feeds to the Mobispine database, see related feeds, and leave comments. ...

The Migration Plug-in for SAP NetWeaver Composition Environment 7.1
Click “Systems􀃆Start Stop 􀃆 Java EE Applications 􀃆 Application Resources” and select “Create New JDBC Custom Datasource” and enter the values as you did for the Developer Studio: How-to Guide: The Migration Plug-in for SAP NetWeaver ...

List of collaborative software
Kerika takes a "graphical Wiki" approach to collaboration within distributed teams: it is a peer-to-peer Java application that runs on Windows, Macs and Linux. Marratech Realtime collaboration with audio, video, whiteboard and chat. ...

Fedora 7 and Apache
To be able to use the functionality of a module which was built as a DSO you # have to place corresponding `LoadModule' lines at this location so the # directives contained in it are actually available _before_ they are used. ...

54906 Business Internet Top Catchy Business (Graphic Design) Name ...
Newscast for June 7th 2007 Fully formatted shownotes can always be found at javaposse.com Redhat forking Java? It’sa good thing really fitzsim.org/blog/?p=17 Eclipse 3.3 RC3 (release candidate 3) has been released ...

Java Posse #125 - Newscast for June 7th 2007
Apache Geronimo milestone 6 has passed the Java EE 5 TCK meaning that it is now possible to deploy Java EE 5 applications to the apache open source Java application server. http://www.theserverside.com/news/thread.tss? thread_id=45680 ...


Programming | Sports | Autos

copyright 2006
Valid XHTML 1.0 Transitional