Package org.mmbase.security

The security infrastructure of MMBase.

See:
Description

Interface Summary

ActionChecker	A piece of 'action check' functionality.
AuthenticationData	This interface represents information about the authentication implementation.
UserContext	This User interface defines the storage for the authentication and authorization, so that information can be shared.

Class Summary

Action	An action is something which an authenticated user may want to do, but which is not directly associated with MMBase nodes.
ActionChecker.Rank	This basic implementation of ActionChecker checks the action only based on rank.
ActionRepository	The defined 'actions' are maintained by the Action repository.
Authentication	This class is an abstract implementation of user authentication in MMBase.
Authorization	The abstract implementation of user authorization in MMBase.
Authorization.QueryCheck	Defines the result of a security check on a query.
BasicUser	A UserContext object is the result of an authentication, on which authorization can be based.
Configurable	Both Authorization and Authentication are configurable.
MemoryActionRepository	This is the most simple way to store 'actions', namely straightforwardly in memory.
MMBaseCop	This class is the main class of the security system.
MMBaseCopConfig	This class is the main class of the security system.
NoAuthentication	This class is used when no authentication is configured.
NoAuthorization	This class is used when no authorization is configured.
Operation	This class is a kind of enumeration (introduced before java 1.5 enumerations) of the operations possible within the security authorization.
Rank	This class defines Rank objects which are used in security implementation.
RequestActionChecker	This action checker can deny an action based on properties of the request made by the user.

Exception Summary

SecurityException	Thrown by the security classes to indicate a security violation/malfunction.
UnknownAuthenticationMethodException	Thrown by the security authentication implementation to indicate an unknown login authentication 'method/application'.

Package org.mmbase.security Description

The security infrastructure of MMBase. MMBase has a pluggable security system, which is currently called from within the bridge implementation. The core of this setup are the abstract classes `Authorization' and `Authentication', which are connected with 'UserContext' implementations.

There are several interesting security implementations available in a standard MMBase installation, but you can always implement your own. The implementations can be found in subpackages of org.mmbase.bridge.implementation.

• The most powerful implementation is the 'context' implementation which supplies a a system of user, groups and 'contexts', which is configured by a sophisticated xml file.
• Another implementation is the 'cloud' implementation which is a simpler system with only users (no groups) which are stored as MMBase objects, so you can administrate this with the normal MMBase edit tools.
• There is also a 'context' implementation available which is completely in cloud. This one is shipped as an MMBase 'application'.
• more..?

Since:

MMBase-1.4

See Also:

See org.mmbase.security.implementation.context.ContextAuthentication See org.mmbase.security.implementation.basic.AuthenticationHandler See org.mmbase.security.implementation.cloud.Authenticate