Java Authentication and Authorization Service (JAAS)
The Java Authentication and Authorization Service (JAAS) is a set of application program
interfaces (APIs) that can determine the identity of a user or computer attempting to run Java code and
ensure that the entity has the right to execute the functions requested. In this context, authentication
is the process of determining whether or not an entity is who or what it declares itself to be; authorization is
the process of giving an entity permission to do, use, or obtain something. Logically,
authentication precedes authorization.
The JAAS authorization process extends the security policy to specify or identify the privileges
that have been granted to an entity attempting to execute a given code. JAAS is independent of
other APIs or technologies that may run concurrently. New or upgraded applications and technologies
can be plugged in without modification.
This was last updated in May 2006
Dig Deeper
-
Software consultant Nari Kannan describes how agile practices and work can be scaled appropriately for success in large organizations. Using lean thinking, reduction of waste, and appropriately organizing work and people, agile can be successfully adapted, regardless of the size of the organization.
-
Undiscovered software glitches in complex systems are common, and one of the primary drivers is the loss of mainframe knowledge of a retiring workforce. Software glitches are lurking in many large systems, particularly mainframe systems, and the COBOL programmers that understand the code best are retiring, according to Jeff Papows, author of the new book, "Glitch - The hidden impact of faulty software." Papows describes how faulty software caused a huge charge to debit card holder's account and why such mistakes are on the rise in this interview. Papows notes the three most pressing drivers for software glitches: loss of intellectual knowledge, market consolidation and the ubiquity of technology
-
Karen Johnson explains the situations in which SQL skills are important for a software tester as well as times when the expertise is not required.
-
People who read this also read...
-
Resources from around the Web