Argyn,
I have been working on a first step - integrating XACML with the
Java Policy API. I've been side-tracked for quite a while by
XACML 2.0, but expect to get back to this soon. The current spec
is at
http://research.sun.com/projects/xacml/J2SEPolicyProvider.html
I have learned a great deal since that spec was published, and
there are changes that need to be made, but the outline is still
valid.
Before you ask, no, we can not commit to an implementation of
this and can not commit to any availability dates.
If you have other ideas for how to integrate XACML with J2EE
apps, I would be very interested.
Anne
On 4 October, Kuketayev, Argyn writes: [xacml-dev] Xacml with J2EE?
> From: "Kuketayev, Argyn" <>
> To:
> Subject: [xacml-dev] Xacml with J2EE?
> Date: Mon, 04 Oct 2004 17:19:53 -0400
>
> is anybody working on xacml integration with j2ee apps?
>
> It looks natural to embed xacml as access control mechanism into EJBs,
> for example. The existing stuff in EJB spec is so simple, that almost
> useless, imho.
>
> On the other hand, xacml could fit well. E.g., all EJB properties would
> become attributes, user's identity becomes a subject. It could be
> possible to use xacml syntax in deployment descriptors of j2ee
> components. Just thinking
>
> Argyn
--
Anne H. Anderson Email:
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311 Tel: 781/442-0928
Burlington, MA 01803-0902 USA Fax: 781/442-1692
