Save This Page
Home » JBoss-5.1.0 » org » jboss » web » tomcat » security » [javadoc | source]
org.jboss.web.tomcat.security
public class: JBossSecurityMgrRealm [javadoc | source] 
java.lang.Object
   org.apache.catalina.realm.RealmBase
      org.jboss.web.tomcat.security.JBossWebRealm
         org.jboss.web.tomcat.security.JBossSecurityMgrRealm

Direct Known Subclasses:
    JBossExtendedSecurityMgrRealm

Deprecated! User - JBossWebRealm

An implementation of the catelinz Realm and Valve interfaces. The Realm implementation handles authentication and authorization using the JBossSX security framework. It relieas on the JNDI ENC namespace setup by the AbstractWebContainer. In particular, it uses the java:comp/env/security subcontext to access the security manager interfaces for authorization and authenticaton.

The Valve interface is used to associated the authenticated user with the SecurityAssociation class when a request begins so that web components may call EJBs and have the principal propagated. The security association is removed when the request completes.

Fields inherited from org.jboss.web.tomcat.security.JBossWebRealm:
log,  certMapping,  securityDomain,  unprotectedResourceDelegation,  securityConstraintProviderClass,  enableAudit,  ignoreBaseDecision,  securityManagerFallback
Methods from org.jboss.web.tomcat.security.JBossWebRealm:
authenticate,   authenticate,   authenticate,   authenticate,   findSecurityConstraints,   getCachingPrincipal,   getName,   getPassword,   getPrincipal,   getPrincipalRoles,   hasResourcePermission,   hasRole,   hasUserDataPermission,   requestURI,   setCertificatePrincipal,   setEnableAudit,   setIgnoreBaseDecision,   setSecurityConstraintProviderClass,   setSecurityDomain,   setUnprotectedResourceDelegation
Methods from java.lang.Object:
clone,   equals,   finalize,   getClass,   hashCode,   notify,   notifyAll,   toString,   wait,   wait,   wait