Custom EJB security in JBoss [20 mn of reading - published 5/18/2005 4:32:39 PM - Target : Expert]

Author

Keven GODET Student-Engineer Supinfo Paris SUPINFO graduate year  2006    Write to the person    All projects of the same author    Mini-CV of the author

Summary

The current specifications of EJB (Enterprise JavaBeans) support basic declarative, role-based access-control mechanisms, but provides limited support for coding application-specific security checks. Moreover, it’s impossible to define a common security architecture for several applications, or to integrate external authorization systems. The open source, J2EE-compliant (Java 2 Platform, Enterprise Edition) JBoss application server offers a protection-proxy security architecture that will help you to overcome these restrictions.

Sommaire

• Introduction
• 1 Role-based security
• 1.1 Authorization mechanisms in an EJB server
• 1.2 Limitations of role-based security
• 2 Security proxies in JBoss
• 2.1 Concept
• 2.2 Create a security proxy with JBoss
• 2.3 Use the proxy
• 3 A simple example
• 3.1 Context
• 3.1 Implementation
• Conclusion