Originally posted by Vince Hon: From HFB P. 584, it describes what's the meaning of 1. Principal 2. Role 3. Users 4. Groups As I know, one "Group" contains "many users". So how "Principal" & "Role" relate each other ? Is it one "Role" contains "many Principal" ?
Principal maps to a user accessing the system while a role defines certain privilages its members can possess. For example, principals p1 and p2 belong to role "Admin", while principals p3 and p4 belong to role "Guest User". The role Admin defines privilages that p1 and p2 can have, while p3 and p4 have their own privilages defined for Guest User.
paul.com<br />SCJP, SCWCD, SCBCD, SCEA
catch it before it slithers away! Oh wait, it's a tiny ad: