16.13. JAAS Security

One of the SecurityContext implementations provided by ModeShape is the JaasSecurityContext, which delegates any authentication or authorization requests to a Java Authentication and Authorization Service ( JAAS ) provider. This is the standard approach for authenticating and authorizing in Java.

EDS uses JAAS for all authentication and authorization in ModeShape, using the 'modeshape' policy defined in the 'jboss-as/server/<config>/conf/login-config.xml' file. This policy references the usernames defined in soa-users.properties and the roles defined in soa-roles.properties. (The ModeShapeEDSRepoDbRealm defines the credentials used for the data source in which ModeShape stores its content.)

Modify the 'soa-users.properties' and 'soa-roles.properties' files as required.