对于不同的主体组，管理员常常需要使用不同的规则集合。
Administrators are often required to have a different set of rules for different group of principals.
可以将一个角色授予多个组或用户(主体)；一个组或主体可以具有映射到它的多个角色。
One role might be granted to multiple groups or users (principals); one group or principal may have multiple roles mapped to it.
注册表服务为一个单元的所有主体、组和帐户信息维护一个数据库。
Registry service maintains a database of all the principal, group and account information for a cell.
同样，部署人员必须在整个应用程序生命周期中维护个别权限到组的或主体映射。
Likewise, the deployers must maintain the individual permission-to-group or principal mappings over the life of the application.
正如我们前面所讨论的，J2EE角色终究只是一个名称，是可以绑定到任何一组主体的逻辑构造。
After all, as we discussed earlier, a J2EE role is merely a name, a logical construct that can be bound to any set of principals.
访问控制列表(acl)： ACL是一种数据结构，它将一个服务的权限列表与一组主体相关联。
Access Control list (ACL) : An ACL is a data structure that associates to a set of principals a list of permissions for a service.
这些安全属性包括主体身份和组信息。
These security attributes are the principal identity and the group information.
主体常常代表一个登录的用户和分配了用户的组。
Principals usually represent a logged-in user and the groups to which that user is assigned.
用户主体还依靠它们所属的组获取角色映射。
User principals also acquire role mappings by virtue of the groups to which they belong.
ACL将权限集授予主体或组——但是，权限的目标和范围是什么？
An ACL grants sets of permissions to principals or groups — but what are the targets or scope of the permissions?
ACL的权限列表中的每个条目将资源上的权限集授予一个主体或组。
Each entry in the ACL's list of permissions grants a set of permissions on the resource to a principal or group.
外来组uuid：此主体所属的、在远程调用中注册的组的UUID。
Foreign group UUIDs: the UUIDs of the groups registered in remote cells to which this principal belongs.
由于任务中的主体只允许一组步骤执行任务，所以用例允许多个备选步骤执行用例。
As the body in a task allowed only a single set of steps to perform a task, the use case allows multiple alternate steps to perform the use case.
辅助组UUID：同一单元中此主体所属的所有组的 UUID。
Secondary group UUIDs: The UUIDs of all the groups to which this principal belongs in the same cell.
术语主体通常是指用户或用户组。
The term principal is used generically to refer to either a user or a group of users.
在作为本系列结束的第3部分，您将探索如何将应用程序操作、组和主体，以及它们与EAz权限的关系在图形界面中可视化。
In Part 3, the conclusion to this series, you will explore how to visualize application actions, groups, and principals, and their relationship to EAz permissions, in a graphical interface.
核心ACL类在基于与组和主体相关联的PermissionSets 的许可操作中的运行。
The operation of the core ACL class in permitting actions based on PermissionSets associated with groups and principals.
您的Principal对象也是mock；我们采用实现 MockPrincipal 的方法，将组与主体直接关联，以方便测试。
Your Principal object is also a mock; we've taken the approach of implementing a MockPrincipal that associates groups directly with the principal for convenient testing.
成功验证后，您将看到一个欢迎页面，该页面表明主体 ashishjain@AUSTIN.IBM.COM已添加到admin组。
On successful authentication, you can see a welcome page, which lists that the principal ashishjain@AUSTIN.IBM.COM has been added to the admin group.
一组断言组成一个主体的配置文件。
几乎每个现代操作系统都使用基于位屏蔽权限的模型，该模型基于主体和组按主体处理资源控制。
Nearly every modern OS makes use of a bit-masking permission-based model that deals with the control of resources by principals, based on principals and groups.
匹配的工作项可以是与调用方主体名对应的用户工作项，也可以是与调用方所在组之一对应的组工作项。
A matching work item is either a user work item corresponding to the caller principal name, or a group work item corresponding to one of the groups of which the caller is a member.
在研究前期的一年半中，受伤实验主体相比于对照组，其脑额叶前部皮层背外侧更厚，之后，厚度逐渐恢复正常。
During the first year and a half of the study, the trauma subjects also acquired a thicker dorsolateral prefrontal cortex than controls did. After that, though, the thickness gradually normalized.
每个帐户表示一个主体和该主体所属的组列表。
Each account represents a principal and a list of the groups to which the principal belongs.
主体、组和组织信息：包含单元的所有主体、组和组织(PGO)的列表。
Principal, group and organization information: This includes a list of all the principals, groups and organizations (PGO) for the cell.
主要组UUID：同一单元中此主体主要属于的组的 UUID。
Primary group UUID: The UUID of the group to which this principal primarily belongs in the same cell.
两个主体属性是rfc822Name(电子邮件ID)和主体所属的组。
The two subject attributes are rfc822Name (E-mail ID) and the group to which the subject belongs.
进行生产要素的配组就是将具体的人、资产、资源，即劳动的主体与客体合为一体，形成现实的生产能力。
To deploy production Factors is to integrate the subject and object of labor-human, asset, resources-so as to form the actual production capacity.
由于视觉主体与视觉对象这两组关系之间的互动，才有被我们的视知觉所把握的形式效应。
Just because of the interaction between vision subject and vision object, we obtain formal effect held by our vision perception.
其主体构架通常称为手臂，而影响末端感应器动作，离主体构架距离最远的关节组则称为腕。
The main frame is frequently denoted as the arm, and the most distal group of joints affecting the motion of the end-effector is referred to collectively as the wrist.
应用推荐