[jboss-cvs] JBossAS SVN: r106128 - projects/jboss-jca/trunk/doc/userguide/en/modules.

[jboss-cvs-commits at lists.jboss.org]

Author: jesper.pedersen
Date: 2010-06-17 12:54:46 -0400 (Thu, 17 Jun 2010)
New Revision: 106128

Modified:
   projects/jboss-jca/trunk/doc/userguide/en/modules/configuration.xml
Log:
[JBJCA-359] Security Integration - Documentation

Modified: projects/jboss-jca/trunk/doc/userguide/en/modules/configuration.xml
===================================================================
--- projects/jboss-jca/trunk/doc/userguide/en/modules/configuration.xml	2010-06-17 16:14:19 UTC (rev 106127)
+++ projects/jboss-jca/trunk/doc/userguide/en/modules/configuration.xml	2010-06-17 16:54:46 UTC (rev 106128)
@@ -147,6 +147,61 @@
         </table>
       </section>
 
+      <section id="jca_security">
+        <title>Security</title>
+
+        <para>The Java EE Connector Architecture 1.6 specification allows units of 
+          <code>javax.resource.spi.Work</code> to be executed in a specific security context.</para>
+
+        <para>This is done through the use of Java Authentication Service Provider Interface for Containers (JSR-196)
+          call backs using the <code>javax.security.auth.callback.Callback</code> interface.</para>
+        
+        <para>The support is activated by letting the work instance implement the</para>
+
+        <programlisting>
+javax.resource.spi.work.WorkContextProvider
+        </programlisting>
+
+        <para>interface and returning an instance of <code>javax.resource.spi.work.SecurityContext</code>.</para>
+
+        <para>There is currently support for injecting a user/roles setup based on the files</para>
+
+        <programlisting>
+config/users.properties
+config/roles.properties
+        </programlisting>
+
+        <para>The format of the <code>users.properties</code> file is</para>
+
+        <programlisting>
+username1=password1
+username2=password2
+        </programlisting>
+
+        <para>The format of the <code>roles.properties</code> file is</para>
+
+        <programlisting>
+username1=role1,role2
+username2=role3,role4
+        </programlisting>
+        
+        <para>The user/roles setup can be configured through the <code>UsersRoles</code> bean in the 
+          <code>config/bootstrap/jca.xml</code> file.</para>
+        
+        <programlisting>
+          <![CDATA[
+<!-- Users / roles -->
+<bean name="UsersRoles"
+      interface="org.jboss.jca.core.spi.security.Callback"
+      class="org.jboss.jca.core.security.UsersRoles">
+  <property name="UsersProperties">${jboss.jca.home}/config/users.properties</property>
+  <property name="RolesProperties">${jboss.jca.home}/config/roles.properties</property>
+</bean>
+           ]]>
+        </programlisting>
+
+      </section>
+
    </section>
 
    <section id="webserver">