java - OSGi: Conditional Permission Admin OR User Admin -
Is the conditional permission for OSG's supplement or special administration and user administration services? I am developing a home automation project based on OSGI and I am not sure whether I should implement security services or not.
The application will eventually reach through the internet, but there will be no group of users with accounts. I think the 'User Admin' is the ideal for a website or an application that will be a certified dedicated user. In my case, the application can communicate with other applications that live in different places, so some authentication may be required for this. But implementing the 'conditional permission administration' user will not have enough security benefits?
My plan is to use 'conditional permission administration' and to create custom conditions to control such special actions, such as sharing resources with other bundles. Is it enough or will I apply both. Apart from this, will both services be running affect the performance of the system greatly?
I really appreciate it if someone shares my thoughts on this thank you!
The conditional admin is about setting code based permissions checked by security manager. UserAdmin is about keeping user credentials and assigning a role to users who can be tested by code using the User Admin API. If UserAdmin has nothing to do with security manager then CPA and UA are very orthogonal.
There is a performance hit being installed as a security manager. UserAdmin does not have similar performance problems because it is only explicitly called.
Comments
Post a Comment