Open
Security
Authentication, authorization and session tracking for web,
server side and desktop applications.
-
Domain management and creation allowing partitioning of
the system into separate domains each with it's own
set of data. Each domain can be independently managed and
configured by a designated domain administrator. Support
for administrative domains used to manage other domains.
Users have ability (if authorized) to create their own
domains without system administrator intervention.
Built-in system restrictions prevent users from accessing
data outside of their designated domain.
-
User identity management providing unique logins and
user to role mappings. Supports user selfregistration
and approval process for enabling created accounts. It
allows assigning custom set of roles to each user or
initialize the user's roles based on a default template.
Distinction is made between internal (e.g. employees)
and external (e.g. clients or customers) users.
-
Role and access right management defining what data can
user access and what action can he or she take. All data
access anywhere in the system is verified against the
configured set of rights. Each role can be assigned to
any number of users. Provides support for personal roles
exclusive to a single user.
-
Authentication of users with the ability to dynamically
disable accounts if needed. Support for changing
credentials either directly by users or by system
administrators.
-
Access authorization on multiple levels: individual
data objects, groups of data objects based on attribute
values, data objects based on their type
-
Session tracking for logged in users, session expiration
and propagation in clustered environment.
This subsystem is almost ready to be released. We are
currently reviewing all the source code, packaging it and
working on its documentation to make it available for public
release. If you are curious what it is or interested in its
functionality you may download the source code from our
public
CVS and try it for yourself.
Others have done it and this
subsystem is already used in
commercial products.
Instructions how to
access our CVS can be found in our
documentation together
with other documents that can help you
setup your
environment and build the
sources. If you have never used CVS,
here
you can find some additional useful information. Since the
CVS contains work in progress, sometimes it may not produce
a working build. If you have any concerns please
contact us and we will
be happy to provide you a prerelease build we can guarantee to
work.
Please, do not hesitate to contact
us if you have any questions. We would also like you to
subscribe to our mailing
list so we can keep you informed about our releases. You
can also easily talk to us using our
online
forums.
Thank you for your interest in our project.
OpenSubsystems team
