Re[2]: [jBoss-User] Security

[Oleg Nitz]

Hi Edward,

Kenworthy, Edward wrote:
> Can I just check my thinking:

> Subject = User (eg Edward Kenworthy)
> Principal = EJB Security Role (eg Financial Advisor)
> Subject's Public Credential = Public Key (for example)
> Subject's Private Credential = Password (for example)

> Is that right ?
My understanding differs:
Subject = Person (eg Edward Kenworthy)
Principal = User login name for the given system (eg "edward")
Subject's Public Credential = Anything used for authorization and
            publicly available (Public Keys, EJB Security Roles)
Subject's Private Credential = Anything used for authorization and
            being a secret info (Password, Private keys)

Best regards,
 Oleg 




--
--------------------------------------------------------------
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]
Problems?:           [EMAIL PROTECTED]