Sureness: Focusing on Protection for RESTful APIs dzone.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from dzone.com Daily Mail and Mail on Sunday newspapers.
Architectural Approaches To Authorization in Server Applications: Activity-Based Access Control Framework
This article discusses the differences in declarative and authoritative implementation approaches when creating a framework in the context of web applications. by
Join the DZone community and get the full member experience.Join For Free
This article is about security. I’ll focus on this in the context of web applications, but I’ll also touch on other types of applications. Before I describe approaches and frameworks, I want to tell you a story.
Background
Throughout my years working in the IT sphere, I’ve had the opportunity to work on projects in a variety of fields. Even though the process of authenticating requirements remained relatively consistent, methods of implementing the authorization mechanism tended to be quite different from project to project. Authorization had to be written practically from scratch for the specific goals of each project; we had to deve