about authentication and authorization(partII)

[chao cai]

what solution will be easy and perfer on the authentication and authorization.
Must support different kind of client(SWING and WEB),how to make the solution most reuseable and esay to express in the exam?

[Goan Balchao]

Hi there Chao,
I was primarily thinking about using a SFSB component to do that with the credentials in the relational d/b. I am going with the simples approach that will work in this case. The SFSB can be configured for the authorization aspects as well.

[chao cai]

did you mean use the SFSB as a Facade,the client call must be dispatch by the SFSB,if do so,there will some impact on scalability