[jboss-dev-forums] [Design of Security on JBoss] - Re: Security Integration in JBAS5

[scott.stark@jboss.org]

"anil.saldhana at jboss.com" wrote : I want to jot down the current effort at integrating security into AS5.
  | 
  | At the container level (web/ejb), I am injecting 3 things via the deployers:
  | a) ISecurityManagement instance - this is just a interface to obtain the SecurityManager(AuthenticationManager,AuthorizationManager,AuditManager etc) given a security domain.  (The default implementation that will be injected will be based on JNDI.  So if I say securityManagement.getAuthenticationManager, that is internally going to do a JNDI lookup).
  | 
The only code that should be doing a jndi lookup is integration code that handles the dependency injection on the deployer. As part of the metadata unification, generic jndi dependences should be producing a generic version of the org.jboss.ejb3.dependencyJndiDemandMetaData/JndiDemandDependencyItem I added for a jndi based injection issue.


View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4085130#4085130

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4085130