We're concerned mostly with extending the authorization component of JAAS, but we'll start with a brief overview of JAAS authentication, followed by a look at a simple JAAS authorization operation.
我们主要关注扩展JAAS的授权组件，但开始我们先简要概述一下 JAAS认证，紧接着看一下一个简单的 JAAS 授权操作。
When configuring a secure environment, you must make sure that every component provides for appropriate authentication, authorization, and encryption of network traffic.
在配置安全环境时，您必须确保所有组件都能为网络通信提供相应的身份验证、授权和加密。
Component developers can use either programmatic or declarative security to define authorization policies.
组件开发者可以使用程序的或声明的安全来定义授权策略。
This process is performed by the transaction Authorization Provider component and it determines if the end user is allowed to invoke the requested transaction.
这个过程是由事务授权Provider组件执行，它决定是否允许终端用户调用被请求事务。
The accessDecisionManager component manages the process of authorization, which the next article of this series will discuss in more detail.
accessDecisionManager组件管理授权过程，这部分内容将在本系列的下篇文章中详细讨论。
The objectDefinitionSource component contains access control definitions according to which authorization will take place.
objectDefinitionSource组件包含对应于将要发生的授权的访问控制定义。
EJB component authorization is managed and enforced in the application server where the MDM server is hosted.
EJB组件授权是在MDMServer所在的应用服务器中管理和实施的。
This component is a repository for persisting user account information such as user id and password, permissions, and roles for providing authentication and authorization of Web resources.
该组件是一个储存库，用于持久化用户账户信息，如用户ID和密码、许可和角色，以便提供Web资源的认证和授权。
The facade component is usually responsible for security (messaging authorization and authentication).
Facade组件通常负责安全性(消息传送授权和身份验证)。
Authentication is provided by the WebSphere Application Server security component, and the instance - and rule-based authorization is provided by Human Task Manager using work items.
WebSphereApplicationServer安全性组件提供身份验证，HumanTaskManager使用工作项来提供基于实例和规则的授权。
What ideally should happen next is that another component will look at the identity in the certificate, and then use that identity to make an authorization decision.
接下来理想的情况应该是另一个组件查看证书中的身份，然后使用该身份做出授权决策。
Ideally, what should happen next is that another component will look at the identity in the certificate and then use that identity to make an authorization decision.
接下来理想的情况应该是另一个组件查看证书中的身份，然后使用该身份做出授权决策。
System component includes authorization management system, identification authentication server and access control server.
系统组件由授权管理系统、身份认证服务器和访问控制服务器三大部分组成。
The first component of this field is a string of up to 15 characters that identifies an individual authorization.
第一部分是一个15 个字符的字符串，它用来识别一个唯一的授权。
The first component of this field is a string of up to 15 characters that identifies an individual authorization.
第一部分是一个15 个字符的字符串，它用来识别一个唯一的授权。
应用推荐