Authorization

The authorization provider interface is defined by the com.sybase.security.provider.Authorizer interface.

There are two primary worker methods:

checkRole()
checkAccess()

There are also two security context life-cycle methods, initContext() and destroyContext(), and one provider lifecycle method, init(), all of which are inherited from com.sybase.security.provider.SecContextProvider.

Provider Initialization
Authorization providers are normally initialized once per static class context. The provider instance itself is shared among any security context instances subsequently created.
Authorization Checks
The authorization capabilities in SAP Mobile Platform center around two primary authorization methods: role checks and resource access checks.

Parent topic: SAP Mobile Platform Security Framework

Created March 27, 2014. To comment on this topic, go to: DocCommentXchange.