posted 16 years ago
Hi all,
I'm looking for any design with reference to security. I wish to create some entities/resources (eg., car, Truck, Flight, Hotel) and to secure them against Groups (set of users)
Example:
Group A (user1, user2 & user3) can access flight1 and hotel2
Group B (user4, user5) can access flight1, car6, car8 and truck8
Is there any design-pattern to 'secure' a resource and to check if a user/group has access-right? I read about JAAS but the one million pages focus primarily on authentication (and I need authorization).
Thanks for any tip!