Hello all, I am presently using the org.jboss.security.auth.spi.LdapLoginModule for authentication with great success, and also have it successfully used for basic Authorization by group.
However, I would like to take a step further on Authorization where my application would like to use attribute-based role authorization (Both EJB/webservice and webapp if possible). An example would be easier than explaining it, so: A user has 1-N projects. A user could have roles 'users', 'supervisor', 'admin', each different for each project. Since that N-N mapping doesn't fit well into groups for LDAP, I would like to explore continue using LDAP for authentication but a seperate piece for authorization. Any recommondations? thanks, -D View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3896689#3896689 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3896689 ------------------------------------------------------- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42" plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php _______________________________________________ JBoss-user mailing list JBoss-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-user
