IBM WebSphere V5.0 Security - CGISecurity

Basic business driversA few business drivers that have been addressed on the implementation level inthe ITSOBank sample application are provided with this book:►►►►►Application end users need to interact directly with business process providedby the application.There are multiple applications taking part in the solution; these applicationsneed to be integrated.Application interface is Web-based.Single delivery channel is provided for the Web application that enablesbusiness process.Business process latency must be reduced to a minimum, and back-endintegration will be necessary to support Web enabled business processes.IT driversA few IT drivers that have been addressed on the implementation level in theITSOBank sample application provided with this book are as follows:►►►►►System provides Single Sign-On across different applications.Application is structured in layers, with separate presentation logic, businesslogic, and data and enterprise integration logic.Users’ directory is centralized and accessible for all applications.Security context is propagated across entire business process.Administration and maintenance costs should be as low as possible.Based on these drivers, the first decision that we made is that the base for thesample application should be a combination of the Self-Service business patternand the Access Integration pattern.11.2 Selecting Application patterns for ITSOBankApplication patterns show the principal layout of the application, focusing on theshape of the application, the application logic and associated data. This sectionsummarizes the decisions made for selecting Application patterns from abusiness point of view and IT/technology point of view.11.2.1 Application pattern for Self-Service business patternA decision was made to use Directly Integrated Single Channel applicationpattern for the ITSOBank sample application.Chapter 11. Security in Patterns for e-business 353