Business Components for Java Applications


Last modified

$Author: bastafidli $
$Date: 2006/11/07 06:39:12 $
$Revision: 1.4 $
$RCSfile: index.html,v $

Open Security

Authentication, authorization and session tracking for web, server side and desktop applications.
  • Domain management and creation allowing partitioning of the system into separate domains each with it's own set of data. Each domain can be independently managed and configured by a designated domain administrator. Support for administrative domains used to manage other domains. Users have ability (if authorized) to create their own domains without system administrator intervention. Built-in system restrictions prevent users from accessing data outside of their designated domain.
  • User identity management providing unique logins and user to role mappings. Supports user selfregistration and approval process for enabling created accounts. It allows assigning custom set of roles to each user or initialize the user's roles based on a default template. Distinction is made between internal (e.g. employees) and external (e.g. clients or customers) users.
  • Role and access right management defining what data can user access and what action can he or she take. All data access anywhere in the system is verified against the configured set of rights. Each role can be assigned to any number of users. Provides support for personal roles exclusive to a single user.
  • Authentication of users with the ability to dynamically disable accounts if needed. Support for changing credentials either directly by users or by system administrators.
  • Access authorization on multiple levels: individual data objects, groups of data objects based on attribute values, data objects based on their type
  • Session tracking for logged in users, session expiration and propagation in clustered environment.

This subsystem is almost ready to be released. We are currently reviewing all the source code, packaging it and working on its documentation to make it available for public release. If you are curious what it is or interested in its functionality you may download the source code from our public CVS and try it for yourself. Others have done it and this subsystem is already used in commercial products.

Instructions how to access our CVS can be found in our documentation together with other documents that can help you setup your environment and build the sources. If you have never used CVS, here you can find some additional useful information. Since the CVS contains work in progress, sometimes it may not produce a working build. If you have any concerns please contact us and we will be happy to provide you a prerelease build we can guarantee to work.

Please, do not hesitate to contact us if you have any questions. We would also like you to subscribe to our mailing list so we can keep you informed about our releases. You can also easily talk to us using our online forums.

Thank you for your interest in our project.

OpenSubsystems team