[CONF] Apache Felix > Apache Felix User Admin - Introduction

[confluence]

Apache Felix User Admin - Introduction Page edited by Jan Willem Janssen Changes (2) The Apache Felix User Admin provides an implementation of the OSGi UserAdmin compendium service. It allows you to manage roles (users and groups), define RBAC-like authorization schemes and test whether certain roles are authorized to perform initiate certain actions. h2. Roles The UserAdmin service defines two types of roles: *users* and *groups*. Other types of roles are not and cannot be defined. h3. Users While the name suggests that this might represent an actual "human being", the specification defines this type ??refers to any entity that may have any number of credentials associated with it that it may use to authenticate itself??. Normally, roles of this type are used to authenticate an initiator of a certain action. h3. Groups A group is an aggregation of other users and groups, allowing you to create authorization schemes. Roles are either _required_ or _basic_ members of a group. h2. Authorization Only authorized users should be able to initiate privileged actions. Whether a user is authorized to do so depends on its membership in groups. The UserAdmin service aids in this by providing an Authorization facade that helps you to determine whether or not users are authorized to perform certain actions. Note that the UserAdmin only provides answer to the question whether a user is allowed to initiate a certain action, it does not actually shield it from doing this, like, for example, the SecurityManager in Java. Full Content The Apache Felix User Admin provides an implementation of the OSGi UserAdmin compendium service. It allows you to manage roles (users and groups), define RBAC-like authorization schemes and test whether certain roles are authorized to initiate certain actions. Change Notification Preferences View Online | View Changes | Add Comment