Package org.mmbase.security

The security infrastructure of MMBase.

See:
Description

Class Summary

Authentication	This class is a abstract implementation of the Authentication.
Authorization	The abstract implementation of the Authorization.
Authorization.QueryCheck	Defines the result of a security check on a query.
Configurable	Both Authorization and Authentication are configurable.
MMBaseCop	This class is the main class of the security system.
MMBaseCopConfig	This class is the main class of the security system.
NoAuthentication	This class is used when no authentication is configured.
NoAuthorization	This class is used when no authorization is configured.
Operation	This class is somekinda enumeration of the operations possible within the security context
Rank	This class defines Rank objects which are used in security implementation.
UserContext	A UserContext object is the result of an authentication, on which authorization can be based.

Exception Summary

SecurityException

Thrown by the security classes to indicate a security violation/malfunction.

Package org.mmbase.security Description

The security infrastructure of MMBase. MMBase has a pluggable security system, which is currently called from within the bridge implementation. The core of this setup are the abstract classes `Authorization' and `Authentication', which are connected with 'UserContext' implementations.

There are several interesting security implementations available in a standard MMBase installation, but you can always implement your own. The implementations can be found in subpackages of org.mmbase.bridge.implementation.

• The most powerful implementation is the 'context' implementation which supplies a a system of user, groups and 'contexts', which is configured by a sophisticated xml file.
• Another implementation is the 'cloud' implementation which is a simpler system with only users (no groups) which are stored as MMBase objects, so you can administrate this with the normal MMBase edit tools.
• There is also a 'context' implementation available which is completely in cloud. This one is shipped as an MMBase 'application'.
• more..?

Since:

MMBase-1.4

See Also:

org.mmbase.bridge, org.mmbase.security.implementation.context, org.mmbase.security.implementation.basic, org.mmbase.security.implementation.cloud