To authors :Java Authorization Contract for Client Containers (JACC)

[Pradeep bhatt]

In the Toc I noticed Java Authorization Contract for Client Containers (JACC). Could you please tell me what is it all about?Thanks

[Ramesh Nagappan]

JACC is introduced as part of J2EE 1.4. This helps to integrate Pluggable Authorization policy providers to facilitate authorization. This helps in role-based authorization using a JACC compliant security provider. (example: Sun Access Manager, may be Netegrity).

/Ramesh

[Christopher Steel]

Also refer to Chapter 5 - J2EE Security Architecture for more information on the role of JACC in then J2EE 1.4 platform.

[Pradeep bhatt]

Thanks Ramesh and Christopher. Can I plugin a JACC and use it for EJB roles ?

[Ramesh Nagappan]

Originally posted by Pradip Bhat:
Thanks Ramesh and Christopher. Can I plugin a JACC and use it for EJB roles ?

Yes of course - You can use it for your EJB authorization.

[Pradeep bhatt]

Is it possible to propogate credentials from one EJB container to another container from another vendor if the same plugin is used?

[Ramesh Nagappan]

Originally posted by Pradip Bhat:
Is it possible to propogate credentials from one EJB container to another container from another vendor if the same plugin is used?

Yes ! The JACC provider may suggest their own solution. If not, you may able to do principal delegation between EJBs (running on different containers) using <user-caller-identity> deployment descriptor option.

/Ramesh

[Pradeep bhatt]

Great.Thanks Ramesh