[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [xacml-dev] Xacml with J2EE?
Argyn, I have been working on a first step - integrating XACML with the Java Policy API. I've been side-tracked for quite a while by XACML 2.0, but expect to get back to this soon. The current spec is at http://research.sun.com/projects/xacml/J2SEPolicyProvider.html I have learned a great deal since that spec was published, and there are changes that need to be made, but the outline is still valid. Before you ask, no, we can not commit to an implementation of this and can not commit to any availability dates. If you have other ideas for how to integrate XACML with J2EE apps, I would be very interested. Anne On 4 October, Kuketayev, Argyn writes: [xacml-dev] Xacml with J2EE? > From: "Kuketayev, Argyn" <firstname.lastname@example.org> > To: email@example.com > Subject: [xacml-dev] Xacml with J2EE? > Date: Mon, 04 Oct 2004 17:19:53 -0400 > > is anybody working on xacml integration with j2ee apps? > > It looks natural to embed xacml as access control mechanism into EJBs, > for example. The existing stuff in EJB spec is so simple, that almost > useless, imho. > > On the other hand, xacml could fit well. E.g., all EJB properties would > become attributes, user's identity becomes a subject. It could be > possible to use xacml syntax in deployment descriptors of j2ee > components. Just thinking > > Argyn -- Anne H. Anderson Email: Anne.Anderson@Sun.COM Sun Microsystems Laboratories 1 Network Drive,UBUR02-311 Tel: 781/442-0928 Burlington, MA 01803-0902 USA Fax: 781/442-1692