Oracle JHeadstart Developer's Guide - Downloads - Oracle

9.2.1. Creating the Database Tables .......................................................................................9-6
9.2.2. Enabling Dynamic Menus ............................................................................................9-7
9.2.3. Defining the Menu Structure At Runtime...................................................................9-10
9.2.4. Linking a User Interface Skin to a Module ................................................................9-11
CHAPTER 10 APPLICATION SECURITY ...................................................10-1
10.1. Understanding and Choosing Security Options with JHeadstart........................................10-2
10.1.1. JAAS and JAZN .......................................................................................................10-2
10.1.2. JAAS Custom Login Module ...................................................................................10-3
10.1.3. Hardcoding Roles or Permissions in Application Code ...........................................10-4
10.1.4. Custom Security........................................................................................................10-5
10.1.5. ADF Model Security ................................................................................................10-5
10.1.6. ADF BC Security......................................................................................................10-7
10.1.7. ADF Model Security vs ADF BC Security ..............................................................10-7
10.2. JHeadstart Security Tables and Security Administration Screens ......................................10-8
10.2.1. Creating the Database Tables ...................................................................................10-8
10.2.2. Generating Security Administration Pages...............................................................10-9
10.3. Using JAAS-JAZN for Authentication.............................................................................10-11
10.3.1. Login Page and Login Bean ...................................................................................10-11
10.3.2. Logout Button and Logout Bean ............................................................................10-11
10.3.3. J2EE Security Set Up in web.xml...........................................................................10-12
10.3.4. Default Users and Roles in jazn-data.xml ..............................................................10-12
10.3.5. Using LDAP and/or Single Sign On in Deployed Application ..............................10-13
10.4. Using JAAS with Custom Login Module for Authentication...........................................10-14
10.4.1. Sample Users And Roles ........................................................................................10-14
10.4.2. Configuring the Custom Login Module .................................................................10-14
10.4.3. System-jazn-data.xml .............................................................................................10-15
10.4.4. Application.xml ......................................................................................................10-16
10.4.5. Debugging the Custom Login Module ...................................................................10-17
10.4.6. Deploying your Application with Custom Login Module......................................10-17
10.5. Using Custom Authentication...........................................................................................10-18
10.5.1. JHeadstart Authentication Filter .............................................................................10-18
10.5.2. Nested JhsModelService Application Module .......................................................10-18
10.5.3. Login Page and Login Bean ...................................................................................10-19
10.5.4. Logout Button.........................................................................................................10-19
10.6. Restricting Access to Groups based on Authorization Information .................................10-20
10.6.1. Restricting Group Access using Permissions .........................................................10-20
10.6.2. When Access Denied Go To Next Group...............................................................10-21
10.6.3. JHeadstart Authorization Proxy..............................................................................10-21
10.7. Restricting Group And Item Operations based on Authorization Information.................10-23
10.7.1. Restricting Group Operations using Permissions ...................................................10-23
10.7.2. Restricting Item Operations....................................................................................10-24
10.8. Using Your Own Security Tables.....................................................................................10-25
10.8.1. Changes when Using JAAS Custom Login Module ..............................................10-25
10.8.2. Changes when Using Custom Authentication ........................................................10-25
10.8.3. Changes when Using Custom Authorization and/or Permissions ..........................10-25
10.8.4. Changes to SQL Script Templates..........................................................................10-26
vi Contents JHeadstart Developer’s Guide