User managed security in Java EE -


i want protect jsf pages in java ee 6 app.

i want store users , roles in db , have privileged users administer them via web tool. privileged users add users roles , set pages require roles access.

it seems me container managed security won't let me that. jaas way forward?

any suggestions , links examples appreciated.

the short answer yes. jaas allow manage security against database use loginmodule(many container implementations jboss offer these pre-canned out of box) , can check out article(http://weblogs.java.net/blog/2006/03/07/repost-using-jaas-jsf) or book(http://www.java.net/external?url=http://purl.oclc.org/net/jsfbook/) more specifics how authenticate users , determine authorization parameters jaas , jsf.

for second requirement, can't see reason why can create separate tool has access tables modify credential information. though seems problem has been solved using ldap provider 1 of number of free , open source web interfaces.

another nifty feature because of clear separation of concerns can later migrate ldap or third party services little effort.


Comments

Popular posts from this blog

jQuery Ajax Render Fragments OR Whole Page -

javascript - Iterate over array and calculate average values of array-parts -

java - Simple Command Line calculator -