[CONF] Apache Felix > Apache Felix User Admin - Introduction

[confluence]

Apache Felix User Admin - Introduction Page added by Jan Willem Janssen The Apache Felix User Admin provides an implementation of the OSGi UserAdmin compendium service. It allows you to manage roles (users and groups), define authorization schemes and test whether certain roles are authorized to perform certain actions. Roles The UserAdmin service defines two types of roles: users and groups. Other types of roles are not and cannot be defined. Users While the name suggests that this might represent an actual "human being", the specification defines this type refers to any entity that may have any number of credentials associated with it that it may use to authenticate itself. Normally, roles of this type are used to authenticate an initiator of a certain action. Groups A group is an aggregation of other users and groups, allowing you to create authorization schemes. Roles are either required or basic members of a group. Authorization Only authorized users should be able to initiate privileged actions. Whether a user is authorized to do so depends on its membership in groups. The UserAdmin service aids in this by providing an Authorization facade that helps you to determine whether or not users are authorized to perform certain actions. Note that the UserAdmin only provides answer to the question whether a user is allowed to initiate a certain action, it does not actually shield it from doing this, like, for example, the SecurityManager in Java. Change Notification Preferences View Online | Add Comment