Role-based access control on the Web using Java

Abstract

This paper describes a new extension of the security features provided by the Java platform. This extension provides complex role-based access control mechanisms that take advantage of a new Java security service designed to enforce access controls based on who runs the code. This extension will be utilized to define a new architecture that allows the design and implementation of role-based security policies for Web applications. using server-side Java technologies.