svn commit: r354401 - /incubator/jackrabbit/trunk/jackrabbit/src/site/fml/faq.fml

[ju...@apache.org]

Author: jukka
Date: Tue Dec  6 03:01:21 2005
New Revision: 354401

URL: http://svn.apache.org/viewcvs?rev=354401&view=rev
Log:
FAQ: Added the access control section.

Modified:
    incubator/jackrabbit/trunk/jackrabbit/src/site/fml/faq.fml

Modified: incubator/jackrabbit/trunk/jackrabbit/src/site/fml/faq.fml
URL: http://svn.apache.org/viewcvs/incubator/jackrabbit/trunk/jackrabbit/src/site/fml/faq.fml?rev=354401&r1=354400&r2=354401&view=diff
==============================================================================
--- incubator/jackrabbit/trunk/jackrabbit/src/site/fml/faq.fml (original)
+++ incubator/jackrabbit/trunk/jackrabbit/src/site/fml/faq.fml Tue Dec  6 03:01:21 2005
@@ -245,6 +245,45 @@
     </faq>
   </part>
 
+  <part id="access">
+    <title>Access control</title>
+
+    <faq id="access-authentication">
+      <question>
+        How do I use LDAP, Kerberos, or some other authentication mechanism
+        with Jackrabbit?
+      </question>
+      <answer>
+        <p>
+          Jackrabbit uses the
+          <a href="http://java.sun.com/products/jaas/">Java Authentication and Authorization Service</a>
+          (JAAS) for authenticating users. You should be able to use any
+          JAAS LoginModule implementation (e.g. the LoginModules in the
+          <a href="http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/spec/com/sun/security/auth/module/package-summary.html">com.sum.security.auth.module</a>
+          package) for authentication. See the JAAS documentation for
+          configuration instructions.
+        </p>
+      </answer>
+    </faq>
+
+    <faq id="access-authorization">
+      <question>
+        How do I manage the access rights of authenticated users?
+      </question>
+      <answer>
+        <p>
+          The current Jackrabbit
+          <a href="apidocs/org/apache/jackrabbit/core/security/SimpleAccessManager.html">SimpleAccessManager</a>
+          class only supports three access levels: anonymous, normal, and
+          system. Anonymous users have read access while normal and system
+          users have full read-write access. You need to implement a custom
+          <a href="apidocs/org/apache/jackrabbit/core/security/AccessManager.html">AccessManager</a>
+          class to get more fine-grained access control.
+        </p>
+      </answer>
+    </faq>
+  </part>
+
   <part id="pms">
     <title>Persistence managers</title>