Eclipse Community Forums: Equinox

Help

Home

Home » Eclipse Projects » Equinox » JAAS Authorization

Show: Today's Messages :: Show Polls :: Message Navigator

JAAS Authorization [message #90829]

Tue, 19 June 2007 20:32

Ali S

Messages: 7
Registered: July 2009

Junior Member

Hi

I have created a desktop like web app (Equinox[Jetty] + Echo). It has a
file browser and some other simple apps. To control access to files and
other resources I'm going to use JAAS authorization(azn). I have enabled
SecurityManager and an XML based policy authorization (permission are
granted to roles and roles associated to users in two XML file and
evaluated when user tries to access a resource like files).
Authentication(acn) is done without JAAS, but all request from users pass
a filter that does chain.doFilter as acned user.

The problem is that I don't know how to manage policies to let Equinox to
do their own job and I don't know whether Equinox knows what do as
privileged or not?

Any help/comment is appreciated and welcome.

Regards,
Ali

Report message to a moderator

Re: JAAS Authorization [message #90856 is a reply to message #90829]

Wed, 20 June 2007 00:49

Simon Kaegi

Messages: 381
Registered: July 2009

Senior Member

Hi Ali,

Sounds interesting.
There's a JAAS discussion goin on the dev-list you might want to monitor.
Also, there's some early work gathering requirements here -
http://wiki.eclipse.org:80/index.php/Security:_Requirements
If you haven't already you might want to take a look at the Conditional
Permission Admin spec. There's some information there around dynamic policy
that might be useful as I don't think simple file based policy is workable
in an OSGi environmnet.

-Simon

"Ali Sakebi" <ali.sakebi@gmail.com> wrote in message
news:498b794d52bec113fea119915bdc2d38$1@www.eclipse.org...
> Hi
>
> I have created a desktop like web app (Equinox[Jetty] + Echo). It has a
> file browser and some other simple apps. To control access to files and
> other resources I'm going to use JAAS authorization(azn). I have enabled
> SecurityManager and an XML based policy authorization (permission are
> granted to roles and roles associated to users in two XML file and
> evaluated when user tries to access a resource like files).
> Authentication(acn) is done without JAAS, but all request from users pass
> a filter that does chain.doFilter as acned user.
> The problem is that I don't know how to manage policies to let Equinox to
> do their own job and I don't know whether Equinox knows what do as
> privileged or not?
>
> Any help/comment is appreciated and welcome.
>
> Regards,
> Ali
>
>

Report message to a moderator

Previous Topic:	URLEncoded Directory Paths
Next Topic:	URLClassLoader, RMI & Equinox

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Fri Apr 26 10:06:22 GMT 2024

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter