[Jboss-dev-forums] [Design of Security on JBoss] - Re: Mapping Application Roles to Declarative Role

[<soh...@jb...>]

Since it makes sense to associate this mapping at the security-domain level to be utilized at different layers of the app (not just ejb and web)(I am thinking Portal,SEAM, JBPM etc)

wouldn't it make sense to extend the configuration options in the login-config.xml so that you can specify the role/identity mappings kind of like this:


    <application-policy name="security-domain-name">
       
          <login-module>blahblah</login-module>
       
       <role-mapping>
             
                    <application-role>whatever role from login module</application-role>
                    <deployment-role>whatever deployment role it should map to</deployment-role>
             
       </role-mapping>
    </application-policy>

Ofcourse this is just an example, and definitely needs better element names



View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3955932#3955932

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3955932