A.2. Included Authorization Modules

This is a simple authorization module that always denies an authorization request. No configuration options are available.

This is a simple authorization module that always permits an authorization request. No configuration options are available.

This is the default authorization module that delegates decision making to the configured delegates.

This is the default web authorization module with the default Tomcat authorization logic (permit all).

This module enforces JACC semantics using two delegates (WebJACCPolicyModuleDelegate for web container authorization requests and EJBJACCPolicyModuleDelegate for EJB container requests). No configuration options available.

This module enforces XACML authorization using two delegates for web and EJB containers (WebXACMLPolicyModuleDelegate and EJBXACMLPolicyModuleDelegate). It creates a PDP object based on registered policies and evaluates web or EJB requests against it.

This is the base authorization module which has to be overridden and provides a facility for delegating to other authorization modules.