
	User Management Guide

Contents

About This Guide

PART I Overview

1 About User-Related Services

About the user-related services

The Directory subsystem

The Security subsystem

ACL-based authorization

Role-based authorization

J2EE-based authorization

Rule-based authorization

The User subsystem

About attributes

Customizing the user subsystem

The user-related services custom tag library

Customizing user-related services

PART II Directory Concepts

2 Understanding Authentication Realms

About authentication and realms

Pluggable realms

How the realm configurations work

exteNd application server realm

exteNd application server compatibility realm

BEA WebLogic realm

IBM WebSphere realm

LDAP server realms

Using the Directory subsystem API

Getting a directory delegate

Portal login component

New User component

Source code for the PAC

Writing a custom realm

PART III Security Concepts

3 ACL-Based Authorization

About ACL-based authorization

How ACLs are implemented

ACLs in the Director software

ACLs in the Security subsystem

ACLs in the Content Management subsystem

ACLs in the Portal subsystem

ACLs in your Director applications

Built-in permissions

Custom permissions

Access right meta

Using the Security API

Getting Security API delegates

Getting an element type and identifier

Listing the permissions associated with an element

Listing the principals with permission for an element

Getting the content of an ACL

Assigning a principal to an ACL

Runtime ACL validation

Customizing ACL-based authorization

Customizing the Security service

Adding ACL-based security to a new subsystem

4 Role-Based Authorization

Role-based authorization

Customizing role-based authorization

How role-based access works

Accessing roles programmatically

PART IV User Concepts

5 Managing User Profiles

About user profiles

About managing user profiles

Non-LDAP realms

Using the New User component

Using the User API

Checking the realm configuration

Checking for a writable realm

Creating a new profile

Looking up user profiles

Getting a user profile

6 Profiling with User Attributes

About attributes

Built-in attributes

Custom attributes

Non-LDAP realms

Attribute properties

Display properties

Using the User API

Getting a list of attributes (non-LDAP)

Getting a list attributes (LDAP)

Identifying multvalued attributes

Creating an attribute (non-LDAP)

Setting an attribute value

7 Profiling with Rules

Using rules for user profiling and personalization

Conditions and actions

PART V Tools

8 Configuring Authentication Realms

Realm configurations

Configuring an LDAP realm

LDAP directory configuration properties

LDAP user configuration properties

Importing the UUID auxiliary class

Configuring and using SSL for LDAP connections

About the configuration and services descriptors

Configuring an external readable realm in exteNd

Configuring a custom realm

Editing or changing realms

9 Using the Directory Section of the PAC

About the Directory section of the PAC

10 Using the Security Section of the PAC

About the Security section of the PAC

Modifying administrative access

11 Using the Profiles Section of the PAC

About the Profiles section of the PAC


	User Management Guide

Copyright © 2000, 2001, 2002, 2003 SilverStream Software, LLC, a wholly owned subsidiary of Novell, Inc. All rights reserved.