[jboss-dev-forums] [Design of Security on JBoss] - Re: Security Integration in JBAS5

[anil.saldhana@jboss.com]

a) I am trying to move away from the old JaasSecurityManagerService way of creating a security manager.   Now that I have interfaces for Authentication,Authorization,Audit,Mapping and IdentityTrust managers., I need to be able to inject these into the containers (web, ejbs).  I have a consolidated interface called as ISecurityManagement which can be injected into the deployers. This ISecurityManagement implementation can get the managers from anywhere. The current implementation in AS5 gets it from JNDI (called as JNDIBasedSecurityManagement).
 - The EJB3 layer injection of ISecurityManagement is hard coded.
http://jira.jboss.com/jira/browse/JBAS-4722

b) Now that the SPI is relatively stable, I would like to concentrate on bug fixes for the rest of the month until AS5 Beta3.  After that I can work on the modules for IdentityTrust, Role Mapping and Audit.


View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4084267#4084267

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4084267