Package org.pajes.security

Provides application and document level security for PAJES applications.

See:
Description

Interface Summary

PrincipalRoles	The PrincipalRoles interface is implemented by classes which maintain a list of valid roles for a specific user.
WritePermission	The WritePermission interface is implemented by classes that determine whether a specific piece of HTML is returned to a browser.

Class Summary

AccessPermission	The abstract AccessPermission is sub-classed by classes that determine whether a user has access to servlet resources, and how to process a login request.
DefaultAccessPermission	The Default AccessPermission is used when no servlet container authentication or PAJES authentication method has been defined.
DefaultPrincipal	Represents an unknown user when using an AuthenticatedPajeServlet but no authentication method has been provided in the deployment descriptor.
DefaultPrincipalRoles	Represents the roles held an unknown user when using an AuthenticatedPajeServlet but no authentication method has been provided in the deployment descriptor.
DefaultWritePermission	The default authorisation class for all HTML tags.
Login	Defines a web application specifc login request handler.
Logout	Defines a web application specifc logout request handler.
QueryParameters	Table to hold query parameters in the session.

Exception Summary

AccessPermissionException	Thrown when a security related exception occurs.
QueryParametersDecryptionException	Thrown when a exception occurs when decoding QueryParameters.

Package org.pajes.security Description

Provides application and document level security for PAJES applications.

Application

Application security can be used if security services are not being provided by the servlet container. The application developer will provide a sub-class of AccessPermission to implement security services.

The Login and Logout classes provide handling to access the authentication and revocation services provided by AccessPermission.

Document

All of the HTML implementations in the org.pajes.html package inherit the HTML.setWritePermission(org.pajes.security.WritePermission, java.lang.String, java.lang.String) method, which allows an implementation of the WritePermission interface to be specified that will determine at run time whether a particular element of the page should be displayed back to the browser. This facility allows, for example, a security system based on only showing menu options to which a user has access. By default, all classes use the DefaultWritePermission Singleton instance to always allow every element to be returned.