Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>According to the Java EE 6 specifications (and to the Java EE 6 tutorial, chapter <a href="http://docs.oracle.com/javaee/6/tutorial/doc/bnbwk.html" rel="nofollow">Overview of Java EE Security</a>):</p> <blockquote> <p>Security for components is provided by their containers</p> </blockquote> <p>So, using the standard Security concepts, it's not wise to make your web application aware of realms and other features that should be managed by the container.</p> <p>In theory there is a way for reaching your goal, but it's very complex and at the end of the day it's not even fully container-agnostic. This way consists in developing your own <a href="http://www.oracle.com/technetwork/java/javase/tech/index-jsp-136007.html" rel="nofollow">JAAS</a> (Java Authentication and Authorization Service), and deploying it into the container before deploying your application.</p> <p>You can find further reference in this <a href="http://server.pramati.com/docstore/1270002/index.htm" rel="nofollow">JAAS Tutorial</a>, from which I extract the following lines that explain the concept I have summarized above:</p> <blockquote> <p>System level security is defined in terms of User Groups, called Roles, and in terms of security privileges mapping definitions, called Realms. Application level security is constituted from User Groups and Realms. </p> <p>At the application level, security permissions also list the various application components that are accessible by each User Group in each Realm. Thus, when an application is deployed, its application level realms and roles are mapped to the system level realms and roles defined on the server.</p> </blockquote>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload