[Jboss-dev-forums] [Design of Security on JBoss] - Re: Generalizing the JACC service

[mholzner <nu...@jb...>]

What about a JACC module descriptor similar to login-config.xml ? Or even make JACC a part of login-config.xml ? After all it seems that the login module and the jacc module have to work together. JACC modules could have a  contract similar to JAAS modules (stackable etc.), and should be just as easy to configure per application. 
I'd also like to mention that this module should allow to be extended to cover access control checks for things like portal resources, or workflow processed, etc, so that multiple PEP interceptors could call into one central PDP (via the JACC impl). I have a document written up describing one possible way (based on the 4.0.2 jacc implementation classes) that I could forward you if you are interested. 


View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3886448#3886448

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3886448