The applying security to a security domain is, per the spec, App Server
specific.
The only thing about security in J2EE is the definition of roles/permissions
that
principals must have to access web resources and/or EJB methods.
So, any code you add to your app will be most likely server specific, except
for role declarations + security contraints in web.xml or ejb-jar.xml
Also, within Orion the security domain may (and is likely to) be specified
separatly for each app/web app
Think about if you want it to be different:
The server's admin group (which can shutdown the server)
You app's admin group (which can add products to a catalog, for instance)
You may define wich classes act as UserManager/RoleManager in
orion-application.xml, using the usermanager-tags
soon Joe Whalnes (I really hope i'ts spelled that way), will have a full
tutorial in orionsupport.com about
Orion's UserManager API
You can find the draft in:
http://www.orionsupport.com/tutorials/usermanager/intro.jsp
-----Original Message-----
From: Jim Crossley [mailto:[EMAIL PROTECTED]]
Sent: Jueves, 09 de Noviembre de 2000 15:33
To: Orion-Interest
Subject: Re: Getting reference of DataSourceUserManager
What do you mean by "configured your app properly"? Which tags/files
are involved?
Is the UserManager stuff part of J2EE or specific to Orion?
Thanks.
"Juan Lorandi (Chile)" wrote:
>
> you may find the current UserManager & RoleManager in
>
> "java:comp/UserManager"
> "java:comp/RoleManager"
>
> If you configured your app properly, UserManager and RoleManager must be
> instances of DataSourceUserManager
>
> HTH,
>
> JP
>
> -----Original Message-----
> From: Gerald [mailto:[EMAIL PROTECTED]]
> Sent: Miércoles, 08 de Noviembre de 2000 18:32
> To: Orion-Interest
> Subject: Getting reference of DataSourceUserManager
>
> In orion-application.xml, one can specify the use of DataSourceUserManager
> which allows Orion to manage user information via a database.
>
> How can I get a reference to an instance of this user manager so that I
can
> add, delete and look up users and groups? Should I just instantiate my own
> copy of the object, or must I get it through Orion?
>
> Thanks.
