InstanceBasedSecurity

We have all had a strong dislike of doing this programmatically and have searched for better way. Perhaps this may one of the first area that AspectOrientedProgramming could be applied. Look at JBoss version 4 http://www.jboss.org/index.html?module=html&op=userdisplay&id=developers/projects/jboss

• Urbancode's presentation about instance level access control - http://www.urbancode.com/presentations/default.jsp
• Extend JAAS for class instance-level authorization
• discussion @ theserverside.com

Open source projects

• http://www.opensymphony.com/osaccess/
• http://gabriel.codehaus.org/
• http://acegisecurity.sourceforge.net/

See also

• RoleBasedAccessControl

Discussion about InstanceBasedSecurity