| org.mmbase.security |
|
org.mmbase.security
The security infrastructure of MMBase. MMBase has a pluggable security system, which is
currently called from within the bridge implementation. The core of this setup are the
abstract classes `Authorization' and `Authentication', which are connected with 'UserContext'
implementations.
There are several interesting security implementations available in a standard MMBase
installation, but you can always implement your own. The implementations can be found in
subpackages of org.mmbase.bridge.implementation.
-
The most powerful implementation is the 'context' implementation which supplies a a system of
user, groups and 'contexts', which is configured by a sophisticated xml file.
-
Another implementation is the 'cloud' implementation which is a simpler system with only users
(no groups) which are stored as MMBase objects, so you can administrate this with the normal
MMBase edit tools.
-
There is also a 'context' implementation available which is completely in cloud. This one is
shipped as an MMBase 'application'.
-
more..?
@since MMBase-1.4
@see org.mmbase.bridge.Cloud
@see org.mmbase.security.implementation.context.ContextAuthentication
@see org.mmbase.security.implementation.basic.AuthenticationHandler
@see org.mmbase.security.implementation.cloud.Authenticate
|
| Java Source File Name | Type | Comment |
| Action.java | Class | An action is something which an authenticated user may want to do, but which is not directly
associated with MMBase nodes. |
| ActionChecker.java | Interface | A piece of 'action check' functionality. |
| ActionRepository.java | Class | The defined 'actions' are maintained by the 'action' repository. |
| Authentication.java | Class | This class is a abstract implementation of the Authentication. |
| AuthenticationData.java | Interface | This interface represents information about the authentication implemtentation. |
| Authorization.java | Class | The abstract implementation of the Authorization. |
| BasicUser.java | Class | A UserContext object is the result of an authentication, on which authorization can be
based. |
| Configurable.java | Class | Both Authorization and Authentication are configurable. |
| MemoryActionRepository.java | Class | This is the most simple way to store 'actions', namely simply in memory. |
| MMBaseCop.java | Class | This class is the main class of the security system. |
| MMBaseCopConfig.java | Class | This class is the main class of the security system. |
| NoAuthentication.java | Class | This class is used when no authentication is configured. |
| NoAuthorization.java | Class | This class is used when no authorization is configured. |
| Operation.java | Class | This class is a kind of enumeration (introduced before java 1.5 enumerations) of the operations
possible within the security authorization. |
| Rank.java | Class | This class defines Rank objects which are used in security implementation. |
| SecurityException.java | Class | Thrown by the security classes to indicate a security violation/malfunction. |
| UnknownAuthenticationMethodException.java | Class | Thrown by the security authentication implementation to indicate an unknown login authentication
'method/application'. |
| UserContext.java | Interface | This User interface defines the storage for the authentication
and authorization, so that information can be shared.
This interface is NOT a container class for client related stuff, altrough
this is possible. |