Application permissions module
4 Message(s) by 2 Author(s) originally posted in java security
| From: k.adamczyk |
Date: Tuesday, August 28, 2007
|
Hi,
I am writting a new
application using Eclipse RCP and GlassFish.
One of the application's
module s is a permissions module that lets the
administrator
assign rights (permissions) to the users. Then the assigned permissions will
have influence
on enabling/disabling
menu options, buttons etc.
I'll be grateful for some advice what
technology should I use (JAAS,
aspect programming, ...).
I do not want to mix the permission-checking
code with the application-logic
code.
Greetings,
Chris
| From: Edward Feustel |
Date: Tuesday, August 28, 2007
|
Hi,
I am writting a new application using Eclipse RCP and GlassFish.
One of the application's modules is a permissions module that lets the
administrator
assign rights (permissions) to the users. Then the assigned permissions
will have influence
on enabling/disabling menu options, buttons etc.
I'll be grateful for some advice what technology should I use (JAAS,
aspect programming, ...).
I do not want to mix the permission-checking code with the
application-logic code.
Greetings,
Chris
Chris,
You might want to look at Sun's XACML on
source forge. Then
write a
policy enforcement module that interprets the credentials the application
provides
(probably authenticated using SAML) against the
XML SAML policy and says yes
or no to the authorization request.
Ed Feustel
| From: k.adamczyk |
Date: Thursday, August 30, 2007
|
Dear Ed,
Many thanks for your reply.
I have not ever heard about XACML. Is it commonly used?
The sourceforge site of this project has been modified more than a year ago
the last time. Is not this project outdated?
Do not get me wrong, I'm just trying to make a good decision and
I'm gathering arguments :)
Best regards,
ChrisU¿ytkownik "Edward Feustel"
<efeustel@xxxxxxxxxxx> napisa³ w wiadomo¶ci
Hi,
I am writting a new application using Eclipse RCP and GlassFish.
One of the application's modules is a permissions module that lets the
administrator
assign rights (permissions) to the users. Then the assigned permissions
will have influence
on enabling/disabling menu options, buttons etc.
I'll be grateful for some advice what technology should I use (JAAS,
aspect programming, ...).
I do not want to mix the permission-checking code with the
application-logic code.
Greetings,
Chris
Chris,
You might want to look at Sun's XACML on sourceforge. Then write a
policy enforcement module that interprets the credentials the application
provides
(probably authenticated using SAML) against the XML SAML policy and says
yes or no to the authorization request.
Ed Feustel
| From: Edward Feustel |
Date: Friday, August 31, 2007
|
Dear Ed,
Many thanks for your reply.
I have not ever heard about XACML. Is it commonly used?
The sourceforge site of this project has been modified more than a year
ago
the last time. Is not this project outdated?
Do not get me wrong, I'm just trying to make a good decision and
I'm gathering arguments :)
Best regards,
Chris
U¿ytkownik "Edward Feustel" <efeustel@xxxxxxxxxxx> napisa³ w wiadomo¶ci
Hi,
I am writting a new application using Eclipse RCP and GlassFish.
One of the application's modules is a permissions module that lets the
administrator
assign rights (permissions) to the users. Then the assigned permissions
will have influence
on enabling/disabling menu options, buttons etc.
I'll be grateful for some advice what technology should I use (JAAS,
aspect programming, ...).
I do not want to mix the permission-checking code with the
application-logic code.
Greetings,
Chris
Chris,
You might want to look at Sun's XACML on sourceforge. Then write a
policy enforcement module that interprets the credentials the application
provides
(probably authenticated using SAML) against the XML SAML policy and says
yes or no to the authorization request.
Ed Feustel
Chris,
I am not positive about where the XACML
standard is these days.
I'd suggest that you contact the OASIS. OASIS is the consortium
that is handling XACML and SAML and is attempting to encourage the
implementation of
PKI .
The first set of modifications was done to permit
integration with a later
version of SAML.
You might want to contact contributors on Source Forge to determine whether
their JAVA
XACML
demo has been updated. I am fairly certain that newer version of SAML
has
been implemented. I believe that Shibboleth, a
middleware authorization
system, and SIGNET, a middleware privilege
management system, use it.
If I can find some students at Dartmouth, I'd hope we can build a
new Policy Decision Process(
PDP ) and a new Policy Enforcement Process (PEP)
that will be usable in a distributed system. Ideally, the PDP will permit
retrieving decisions from other PDPs (using SAML) and the PEP will use
decisions
from the
master PDP (using SAML). This will require a PKI in place, but
Dartmouth has one.
If you find that there are missing pieces, please let me know!
Thanks,
Ed
Next Message: jarsigner question
Blogs related to Application permissions module
400+ Online Resources...
Mobispine – Mobispine is a free
Java application for reading your feeds on your mobile. The service also includes a web component where users can add feeds to the Mobispine database, see related feeds, and leave comments.
...
The Migration Plug-in for SAP NetWeaver Composition Environment 7.1
Click “SystemsStart Stop
Java EE
Applications
Application Resources” and select “Create New JDBC Custom Datasource” and enter the values as you did for the Developer Studio: How-to Guide: The Migration Plug-in for SAP NetWeaver
...
List of collaborative software
Kerika takes a "graphical Wiki" approach to collaboration within distributed teams: it is a peer-to-peer
Java application that runs on Windows, Macs and Linux. Marratech Realtime collaboration with audio, video, whiteboard and chat.
...
Fedora 7 and Apache
To be able to use the functionality of a
module which was built as a DSO you # have to place corresponding `LoadModule' lines at this location so the # directives contained in it are actually available _before_ they are used.
...
54906 Business Internet Top Catchy Business (Graphic Design) Name ...
Newscast for June 7th 2007 Fully formatted shownotes can always be found at javaposse.com Redhat forking
Java? It’sa good thing really fitzsim.org/blog/?p=17 Eclipse 3.3 RC3 (release candidate 3) has been released
...
Java Posse #125 - Newscast for June 7th 2007
Apache Geronimo milestone 6 has passed the
Java EE 5 TCK meaning that it is now possible to deploy
Java EE 5
applications to the apache open source
Java application server. http://www.theserverside.com/news/thread.tss? thread_id=45680
...