org.openejb.spi
Interface SecurityService
- All Superinterfaces:
- Service
- All Known Implementing Classes:
- PseudoSecurityService
- public interface SecurityService
- extends Service
Methods inherited from interface org.openejb.spi.Service |
init |
isCallerAuthorized
public boolean isCallerAuthorized(Object securityIdentity,
String[] roleNames)
- Check if securityIdentity is authorized to perform the specified action.
This is currently used by OpenEJB to check if a caller is authorized to
to assume at least one of a collection of roles, the roles authorized for
a particular method of a particular deployment.
translateTo
public Object translateTo(Object securityIdentity,
Class type)
- Attempts to convert an opaque securityIdentity to a concrete target type.
This is currently used to obtain an java.security.Princiapl type which
must be returned by OpenEJB when a bean invokes EJBContext.getCallerPrincipal().
Conversion to a Principal type must be supported.
It may also be used by JCX connectors to obtain the JAAS Subject of the caller,
support for translation to Subject type is currently optional.
setSecurityIdentity
public void setSecurityIdentity(Object securityIdentity)
getSecurityIdentity
public Object getSecurityIdentity()
Copyright © 1999-2005 OpenEJB. All Rights Reserved.