Generic Security

Hi,

***This is my problem. In my system I have users, groups and privilages. The system has to be able to give privilages to groups and assign users to those groups. Now this has be independant of any App server and must be done from a system GUI. This is so that I should be able to port it to any App server.

***I want to use declarative security as much as posible. This means I want to map my system privilages to J2EE security roles. How do I achive this ?

***I want my authentication and authorization to be independant of the app server. I am curently using welogic app server version 7. How do I achive this? Do I realy have to write my own authentication provider and authorization provider.

***Cant I write directly in to the weblogic LDAP server ?

Thanks,

Gavin

[815 byte] By [gselvaraa] at [2007-9-28 13:31:04]
# 1

Hi,

A lot of this functionality is already provided by J2EE. The J2Ee blueprints book has a good description of the security services available at

http://java.sun.com/blueprints/guidelines/designing_enterprise_applications_2e/index.html

in particular in the security chapter at

http://java.sun.com/blueprints/guidelines/designing_enterprise_applications_2e/security/security.html

hope that helps,

Sean

seanbrydona at 2007-7-12 9:33:08 > top of Java-index,Other Topics,Patterns & OO Design...