Return-Path: Delivered-To: apmail-geronimo-user-archive@www.apache.org Received: (qmail 27514 invoked from network); 28 Aug 2004 05:57:58 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur-2.apache.org with SMTP; 28 Aug 2004 05:57:58 -0000 Received: (qmail 62443 invoked by uid 500); 28 Aug 2004 05:57:58 -0000 Delivered-To: apmail-geronimo-user-archive@geronimo.apache.org Received: (qmail 62353 invoked by uid 500); 28 Aug 2004 05:57:57 -0000 Mailing-List: contact user-help@geronimo.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: list-post: Reply-To: user@geronimo.apache.org Delivered-To: mailing list user@geronimo.apache.org Received: (qmail 62339 invoked by uid 99); 28 Aug 2004 05:57:57 -0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: neutral (hermes.apache.org: 66.235.180.72 is neither permitted nor denied by domain of jboynes@gluecode.com) Received: from [66.235.180.72] (HELO sls-dc1p2.dca2.superb.net) (66.235.180.72) by apache.org (qpsmtpd/0.27.1) with ESMTP; Fri, 27 Aug 2004 22:57:56 -0700 Received: from [192.168.37.199] (adsl-209-233-18-245.dsl.snfc21.pacbell.net [209.233.18.245]) (authenticated bits=0) by sls-dc1p2.dca2.superb.net (8.12.10/8.12.10) with ESMTP id i7S2hSc7004361 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Fri, 27 Aug 2004 19:43:30 -0700 Message-ID: <412FF05E.3010302@gluecode.com> Date: Fri, 27 Aug 2004 19:39:26 -0700 From: Jeremy Boynes User-Agent: Mozilla Thunderbird 0.7.2 (Windows/20040707) X-Accept-Language: en-us, en MIME-Version: 1.0 To: user@geronimo.apache.org Subject: Re: ACL in geronimo. References: In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Prem kalyan wrote: > hi , > > I have few question regarding Acl's in geronimo. > > 1. How are ACL's defined in Geronimo. > Can you clarify a bit - which ACLs do you mean (Servlet context path, EJB method, JMX, ...)? > 2. Does geronimo uses only JAAS specification for granting > permissions or/and anyother way. > We use JAAS login modules to authenticate - access control checks are performed using JACC. > 3. A code snippet wld be higly helpful. > Again, in which context? For standard spec stuff I think there are a few examples on the web. -- Jeremy