You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by bu...@apache.org on 2014/10/27 16:56:07 UTC

svn commit: r927052 - in /websites/staging/directory/trunk/content: ./ fortress/user-guide/ fortress/user-guide/images/

Author: buildbot
Date: Mon Oct 27 15:56:06 2014
New Revision: 927052

Log:
Staging update by buildbot for directory

Added:
    websites/staging/directory/trunk/content/fortress/user-guide/1.4-why-rbac-is-important.html
    websites/staging/directory/trunk/content/fortress/user-guide/1.5-how-to-impl-rbac.html
    websites/staging/directory/trunk/content/fortress/user-guide/1.6-go-for-more.html
    websites/staging/directory/trunk/content/fortress/user-guide/images/ARbac.png   (with props)
Modified:
    websites/staging/directory/trunk/content/   (props changed)
    websites/staging/directory/trunk/content/fortress/user-guide/1.3-what-rbac-is.html

Propchange: websites/staging/directory/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Mon Oct 27 15:56:06 2014
@@ -1 +1 @@
-1634577
+1634581

Modified: websites/staging/directory/trunk/content/fortress/user-guide/1.3-what-rbac-is.html
==============================================================================
--- websites/staging/directory/trunk/content/fortress/user-guide/1.3-what-rbac-is.html (original)
+++ websites/staging/directory/trunk/content/fortress/user-guide/1.3-what-rbac-is.html Mon Oct 27 15:56:06 2014
@@ -178,28 +178,28 @@
 <li>ANSI INCITS 359-2001, <a href="http://profsandhu.com/journals/tissec/ANSI+INCITS+359-2004.pdf">http://profsandhu.com/journals/tissec/ANSI+INCITS+359-2004.pdf</a> - The ANSI specification describes RBAC and provides functional specifications in Z-notation.  </li>
 </ul>
 <p><CENTER>
-<img alt="ANSI RBAC" src="images/ANSIRBAC-Spe.png" />
+<img alt="ANSI RBAC" src="images/ANSIRBAC-Spec.png" />
 </CENTER></p>
 <ul>
-<li>RBAC0 - Users, Roles, Permissions (Objects-Operations), Sessions - Form the Core of ANSI RBAC.  Role activation and Permissions mapped to Object-&gt;Operation pairing are key facets of the basic ANSI RBAC model.</li>
+<li><b>RBAC0</b> - Users, Roles, Permissions (Objects-Operations), Sessions - Form the Core of ANSI RBAC.  Role activation and Permissions mapped to Object-&gt;Operation pairing are key facets of the basic ANSI RBAC model.</li>
 </ul>
 <p><CENTER>
 <img alt="The Core" src="images/RbacCore.png" /> 
 </CENTER></p>
 <ul>
-<li>RBAC1 - Hierarchical Roles - Encourages proper role engineering.  Parent roles are Business Roles while child roles map to IT Roles.  Role hierarchies should be many-to-many or multi-inheritance.</li>
+<li><b>RBAC1</b> - Hierarchical Roles - Encourages proper role engineering.  Parent roles are Business Roles while child roles map to IT Roles.  Role hierarchies should be many-to-many or multi-inheritance.</li>
 </ul>
 <p><CENTER>
 <img alt="Hierarchical RBAC" src="images/RbacHier.png" /> 
 </CENTER></p>
 <ul>
-<li>RBAC2 - Static Separation of Duties - Used to limit the privilege of users to within normal boundaries.  SSD constraints are applied at role assignment time.</li>
+<li><b>RBAC2</b> - Static Separation of Duties - Used to limit the privilege of users to within normal boundaries.  SSD constraints are applied at role assignment time.</li>
 </ul>
 <p><CENTER>
 <img alt="Static Separation of Duties" src="images/RbacSSD.png" /> 
 </CENTER></p>
 <ul>
-<li>RBAC3 - Dynamic Separation of Duties - Enforces constraints on what functions may used together at any point in time.  DSD constraints may be used to enforce strict controls during multi-step approval processes.  DSD constraints are applied at role activation time.</li>
+<li><b>RBAC3</b> - Dynamic Separation of Duties - Enforces constraints on what functions may used together at any point in time.  DSD constraints may be used to enforce strict controls during multi-step approval processes.  DSD constraints are applied at role activation time.</li>
 </ul>
 <p><CENTER>
 <img alt="Dynamic Separation of Duties" src="images/RbacDSD.png" /> 

Added: websites/staging/directory/trunk/content/fortress/user-guide/1.4-why-rbac-is-important.html
==============================================================================
--- websites/staging/directory/trunk/content/fortress/user-guide/1.4-why-rbac-is-important.html (added)
+++ websites/staging/directory/trunk/content/fortress/user-guide/1.4-why-rbac-is-important.html Mon Oct 27 15:56:06 2014
@@ -0,0 +1,221 @@
+<!DOCTYPE html>
+<!--
+    Licensed to the Apache Software Foundation (ASF) under one or more
+    contributor license agreements.  See the NOTICE file distributed with
+    this work for additional information regarding copyright ownership.
+    The ASF licenses this file to You under the Apache License, Version 2.0
+    (the "License"); you may not use this file except in compliance with
+    the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<html>
+	<head>
+		<title>1.4 - Why is ANSI RBAC Important? &mdash; Apache Directory</title>
+		
+	    <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+	    <link href="./../../css/turquoise.css" rel="stylesheet" type="text/css">
+    
+        
+        <link rel="shortcut icon" href="./../../images/fortress-icon_16x16.png">
+    
+        <!-- Google Analytics -->
+        <script src="http://www.google-analytics.com/urchin.js" type="text/javascript"></script>
+        <script type="text/javascript">
+            _uacct = "UA-1358462-1";
+            urchinTracker();
+        </script>
+	</head>
+	<body>
+	    <div id="container">
+            <div id="header">
+                <div id="subProjectsNavBar">
+                    <a href="./../../">
+                        
+                        Apache Directory Project
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../apacheds">
+                        
+                        ApacheDS
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../studio">
+                        
+                        Apache Directory Studio
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../api">
+                        
+                        Apache LDAP API
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../mavibot">
+                        
+                        Mavibot
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../escimo">
+                        
+                        eSCIMo
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../fortress">
+                        
+                        <STRONG>Fortress</STRONG>
+                        
+                    </a>
+                </div><!-- subProjectsNavBar -->
+            </div><!-- header -->
+            <div id="content">
+                <div id="leftColumn">
+                    
+<div id="navigation">
+    
+    <ul>
+        <li>
+          <a href="http://bit.ly/1n9YlQT" target="_blank">
+            <img src="./../../images/ApacheConBudapest.png" width="125" height="125" alt="I'm Speaking at ApacheCon Europe 2014! Join me!" title="I'm Speaking at ApacheCon Europe 2014! Join me!" border="0" style="margin-bottom:-3px;"/>
+
+          </a>
+        </li>
+    </ul>
+    <h5>Fortress</h5>
+    <ul>
+        <li><a href="./../../fortress/">Home</a></li>
+        <li><a href="./../../fortress/">History</a></li>
+        <li><a href="./../../fortress/news.html">News</a></li>
+    </ul>
+    <h5>Downloads</h5>
+    <ul>
+	    <!--li><a href="./../../fortress/downloads.html">Core 1.0.0-RC39</a>&nbsp;&nbsp;<IMG src="./../../images/new_badge.gif" alt="" style="margin-bottom:-3px;" border="0"></li>
+        <li><a href="./../../fortress/downloads.html">EnMasse 1.0.0-RC39</a>&nbsp;&nbsp;<IMG src="./../../images/new_badge.gif" alt="" style="margin-bottom:-3px;" border="0"></li>
+        <li><a href="./../../fortress/downloads.html">Commander 1.0.0-RC39</a>&nbsp;&nbsp;<IMG src="./../../images/new_badge.gif" alt="" style="margin-bottom:-3px;" border="0"></li>
+        <li><a href="./../../fortress/downloads.html">Realm 1.0.0-RC39</a>&nbsp;&nbsp;<IMG src="./../../images/new_badge.gif" alt="" style="margin-bottom:-3px;" border="0"></li>
+        <li><a href="./../../fortress/download-old-versions.html">Older versions</a></li-->
+    </ul>
+    <h5>Getting Started</h5>
+    <ul>
+        <li><a href="./../../fortress/vision.html">Vision</a></li>
+        <li><a href="./../../fortress/issues.html">Issues</a></li>
+    </ul>
+    <h5>Documentation</h5>
+    <ul>
+        <li><a href="./../../fortress/overview.html">Overview</a></li>
+	    <li><a href="./../../fortress/quick-start.html">Quick Start</a></li>
+        <li><a href="./../../fortress/user-guide.html">Users Guide</a></li>
+        <!--li><a href="./../../fortress/gen-docs/latest/apidocs/">JavaDocs</a></li-->
+        <!--li><a href="./../../fortress/gen-docs/latest/xref/">Cross-Reference</a></li-->
+        <!--li><a href="./../../fortress/gen-docs/latest/">Generated Reports</a></li-->
+        <!--li><a href="./../../fortress/developer-guide.html">Developer Guide</a></li-->
+    </ul>
+    
+    
+    <h5>Support</h5>
+    <ul>
+        <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists &amp; IRC</a></li>
+        <li><a href="./../../sources.html">Sources</a></li>
+        <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+        <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+    </ul>
+    <h5>Community</h5>
+    <ul>
+        <li><a href="./../../contribute.html">How to Contribute</a></li>
+        <li><a href="./../../team.html">Team</a></li>
+        <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+        <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+    </ul>
+    <h5>About Apache</h5>
+    <ul>
+        <li><a href="http://www.apache.org/">Apache</a></li>
+        <li><a href="http://www.apache.org/licenses/">License</a></li>
+        <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+        <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+        <li><a href="http://www.apache.org/security/">Security</a></li>
+    </ul>
+    
+</div><!-- navigation -->
+
+                </div><!-- leftColumn -->
+                <div id="rightColumn">
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="1.3-what-rbac-is.html">1.3 - What ANSI RBAC is</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="1-intro-rbac.html">1 - An Introduction to Role-Based Access Control ANSI INCITS 359-2004</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="1.5-how-to-impl-rbac.html">1.5 - How to implement ANSI RBAC</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+<h1 id="14-why-is-ansi-rbac-important">1.4 - Why is ANSI RBAC Important?</h1>
+<ul>
+<li>
+<p>Enforces the concept of least privilege. Granting users business functionality doesn't imply entitlements may be used at any time. For example a bank teller shouldn't withdrawal money from customer accounts outside of normal business hours or freelance contractors don't require access to production resources to do their jobs.</p>
+</li>
+<li>
+<p>Enables Regulatory Compliance. Who has been granted authority to the most important resources? How can we be certain that terminiated employees and customers no longer have access to controlled resources?</p>
+</li>
+<li>
+<p>Enforces separation of duty policies. For example traders must not be regulators or purchasing agents cannot approve transactions.</p>
+</li>
+<li>
+<p>Eases administration costs due to elimination of redundant resources. Enable business units to be delegated administrative tasks.</p>
+</li>
+</ul>
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="1.3-what-rbac-is.html">1.3 - What ANSI RBAC is</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="1-intro-rbac.html">1 - An Introduction to Role-Based Access Control ANSI INCITS 359-2004</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="1.5-how-to-impl-rbac.html">1.5 - How to implement ANSI RBAC</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+                </div><!-- rightColumn -->
+                <div id="endContent"></div>
+            </div><!-- content -->
+            <div id="footer">&copy; 2003-2014, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+                Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache Mavibot, Mavibot, Apache eSCIMo, eSCIMo, Fortress, Apache Fortress, EnMasse,
+                Apache EnMasse, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+            </div>
+        </div><!-- container -->
+    </body>
+</html>

Added: websites/staging/directory/trunk/content/fortress/user-guide/1.5-how-to-impl-rbac.html
==============================================================================
--- websites/staging/directory/trunk/content/fortress/user-guide/1.5-how-to-impl-rbac.html (added)
+++ websites/staging/directory/trunk/content/fortress/user-guide/1.5-how-to-impl-rbac.html Mon Oct 27 15:56:06 2014
@@ -0,0 +1,278 @@
+<!DOCTYPE html>
+<!--
+    Licensed to the Apache Software Foundation (ASF) under one or more
+    contributor license agreements.  See the NOTICE file distributed with
+    this work for additional information regarding copyright ownership.
+    The ASF licenses this file to You under the Apache License, Version 2.0
+    (the "License"); you may not use this file except in compliance with
+    the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<html>
+	<head>
+		<title>1.5 - How to implement ANSI RBAC &mdash; Apache Directory</title>
+		
+	    <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+	    <link href="./../../css/turquoise.css" rel="stylesheet" type="text/css">
+    
+        
+        <link rel="shortcut icon" href="./../../images/fortress-icon_16x16.png">
+    
+        <!-- Google Analytics -->
+        <script src="http://www.google-analytics.com/urchin.js" type="text/javascript"></script>
+        <script type="text/javascript">
+            _uacct = "UA-1358462-1";
+            urchinTracker();
+        </script>
+	</head>
+	<body>
+	    <div id="container">
+            <div id="header">
+                <div id="subProjectsNavBar">
+                    <a href="./../../">
+                        
+                        Apache Directory Project
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../apacheds">
+                        
+                        ApacheDS
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../studio">
+                        
+                        Apache Directory Studio
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../api">
+                        
+                        Apache LDAP API
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../mavibot">
+                        
+                        Mavibot
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../escimo">
+                        
+                        eSCIMo
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../fortress">
+                        
+                        <STRONG>Fortress</STRONG>
+                        
+                    </a>
+                </div><!-- subProjectsNavBar -->
+            </div><!-- header -->
+            <div id="content">
+                <div id="leftColumn">
+                    
+<div id="navigation">
+    
+    <ul>
+        <li>
+          <a href="http://bit.ly/1n9YlQT" target="_blank">
+            <img src="./../../images/ApacheConBudapest.png" width="125" height="125" alt="I'm Speaking at ApacheCon Europe 2014! Join me!" title="I'm Speaking at ApacheCon Europe 2014! Join me!" border="0" style="margin-bottom:-3px;"/>
+
+          </a>
+        </li>
+    </ul>
+    <h5>Fortress</h5>
+    <ul>
+        <li><a href="./../../fortress/">Home</a></li>
+        <li><a href="./../../fortress/">History</a></li>
+        <li><a href="./../../fortress/news.html">News</a></li>
+    </ul>
+    <h5>Downloads</h5>
+    <ul>
+	    <!--li><a href="./../../fortress/downloads.html">Core 1.0.0-RC39</a>&nbsp;&nbsp;<IMG src="./../../images/new_badge.gif" alt="" style="margin-bottom:-3px;" border="0"></li>
+        <li><a href="./../../fortress/downloads.html">EnMasse 1.0.0-RC39</a>&nbsp;&nbsp;<IMG src="./../../images/new_badge.gif" alt="" style="margin-bottom:-3px;" border="0"></li>
+        <li><a href="./../../fortress/downloads.html">Commander 1.0.0-RC39</a>&nbsp;&nbsp;<IMG src="./../../images/new_badge.gif" alt="" style="margin-bottom:-3px;" border="0"></li>
+        <li><a href="./../../fortress/downloads.html">Realm 1.0.0-RC39</a>&nbsp;&nbsp;<IMG src="./../../images/new_badge.gif" alt="" style="margin-bottom:-3px;" border="0"></li>
+        <li><a href="./../../fortress/download-old-versions.html">Older versions</a></li-->
+    </ul>
+    <h5>Getting Started</h5>
+    <ul>
+        <li><a href="./../../fortress/vision.html">Vision</a></li>
+        <li><a href="./../../fortress/issues.html">Issues</a></li>
+    </ul>
+    <h5>Documentation</h5>
+    <ul>
+        <li><a href="./../../fortress/overview.html">Overview</a></li>
+	    <li><a href="./../../fortress/quick-start.html">Quick Start</a></li>
+        <li><a href="./../../fortress/user-guide.html">Users Guide</a></li>
+        <!--li><a href="./../../fortress/gen-docs/latest/apidocs/">JavaDocs</a></li-->
+        <!--li><a href="./../../fortress/gen-docs/latest/xref/">Cross-Reference</a></li-->
+        <!--li><a href="./../../fortress/gen-docs/latest/">Generated Reports</a></li-->
+        <!--li><a href="./../../fortress/developer-guide.html">Developer Guide</a></li-->
+    </ul>
+    
+    
+    <h5>Support</h5>
+    <ul>
+        <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists &amp; IRC</a></li>
+        <li><a href="./../../sources.html">Sources</a></li>
+        <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+        <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+    </ul>
+    <h5>Community</h5>
+    <ul>
+        <li><a href="./../../contribute.html">How to Contribute</a></li>
+        <li><a href="./../../team.html">Team</a></li>
+        <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+        <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+    </ul>
+    <h5>About Apache</h5>
+    <ul>
+        <li><a href="http://www.apache.org/">Apache</a></li>
+        <li><a href="http://www.apache.org/licenses/">License</a></li>
+        <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+        <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+        <li><a href="http://www.apache.org/security/">Security</a></li>
+    </ul>
+    
+</div><!-- navigation -->
+
+                </div><!-- leftColumn -->
+                <div id="rightColumn">
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="1.4-why-rbac-is-important.html">1.4 - Why is ANSI RBAC Important?</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="1-intro-rbac.html">1 - An Introduction to Role-Based Access Control ANSI INCITS 359-2004</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="1.6-go-for-more.html">1.6 - Where to go for more info</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+<h1 id="15-how-to-implement-ansi-rbac">1.5 - How to implement ANSI RBAC</h1>
+<ul>
+<li>
+<p>Learn using the SPEC</p>
+</li>
+<li>
+<p>Pick a technology stack you are comfortable with based on current knowledge, SLAs, data storage, and support requirements.</p>
+</li>
+<li>
+<p>Design a very simple RBAC data model.  Eight objects are all that is needed.</p>
+<ul>
+<li>User, Role, Permission, Object, Operation, User-Role, Session, Constraints</li>
+</ul>
+</li>
+<li>
+<p>Design a simple RBAC software model. </p>
+<ul>
+<li>Top layer called a Manager and contains a stable public API that external apps may call.<ul>
+<li>Three managers, System, Admin, Review are all that is needed.</li>
+<li>The implementation the manager interface contains must be able to be be swapped out for another complete RBAC system without impacting dependent apps.</li>
+<li>External applications use RBAC Manager API to map to internal entitlement systems.</li>
+</ul>
+</li>
+<li>Middle layer for RBAC system is optional and may be used for processing fine-grained data validations rules</li>
+<li>Bottom layer for accessing the actual data.<ul>
+<li>Implementation may be swapped for other back ends without impacting Manager.  </li>
+<li>LDAP, JDBC, Hibernate, JAX-WS, JAX-RS other technologies may be used here to manage the data</li>
+</ul>
+</li>
+</ul>
+</li>
+<li>
+<p>Don't ignore the Audit</p>
+<ul>
+<li>View before and after images of the data</li>
+</ul>
+</li>
+<li>
+<p>Code first as a POC.  Start with the core - RBAC0.  Get it right first.</p>
+</li>
+<li>
+<p>Test driven development and automation key contributors to successful outcome.</p>
+<ul>
+<li>Engage IT teams.<ul>
+<li>Analyze existing IT entitlements.  </li>
+<li>Use established role mining techniques.  </li>
+</ul>
+</li>
+</ul>
+</li>
+<li>
+<p>Map existing IT entitlements to RBAC system using established role engineering techniques</p>
+</li>
+<li>
+<p>Use parent roles as Business Roles and child roles as IT Roles.</p>
+</li>
+<li>
+<p>Deploy RBAC system into application environment using established standards.  Use declarative policy enforcement points like JEE security for coarse-grained, Spring for fine-grained.  </p>
+</li>
+<li>
+<p>Application teams own mapping between Business and IT roles.</p>
+</li>
+<li>
+<p>Model administrative controls on ARBAC.  More on ARBAC coming soon...</p>
+</li>
+</ul>
+<p><CENTER>
+    <img alt="Administrative RBAC" src="images/ARbac.png" />
+</CENTER></p>
+<ul>
+<li>Roll-out (Slow and steady starting out)</li>
+</ul>
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="1.4-why-rbac-is-important.html">1.4 - Why is ANSI RBAC Important?</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="1-intro-rbac.html">1 - An Introduction to Role-Based Access Control ANSI INCITS 359-2004</a>
+		
+        </div>
+        <div class="nav_next">
+        
+            <a href="1.6-go-for-more.html">1.6 - Where to go for more info</a>
+		
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+                </div><!-- rightColumn -->
+                <div id="endContent"></div>
+            </div><!-- content -->
+            <div id="footer">&copy; 2003-2014, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+                Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache Mavibot, Mavibot, Apache eSCIMo, eSCIMo, Fortress, Apache Fortress, EnMasse,
+                Apache EnMasse, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+            </div>
+        </div><!-- container -->
+    </body>
+</html>

Added: websites/staging/directory/trunk/content/fortress/user-guide/1.6-go-for-more.html
==============================================================================
--- websites/staging/directory/trunk/content/fortress/user-guide/1.6-go-for-more.html (added)
+++ websites/staging/directory/trunk/content/fortress/user-guide/1.6-go-for-more.html Mon Oct 27 15:56:06 2014
@@ -0,0 +1,215 @@
+<!DOCTYPE html>
+<!--
+    Licensed to the Apache Software Foundation (ASF) under one or more
+    contributor license agreements.  See the NOTICE file distributed with
+    this work for additional information regarding copyright ownership.
+    The ASF licenses this file to You under the Apache License, Version 2.0
+    (the "License"); you may not use this file except in compliance with
+    the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<html>
+	<head>
+		<title>1.6 - Where to go for more info &mdash; Apache Directory</title>
+		
+	    <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+	    <link href="./../../css/turquoise.css" rel="stylesheet" type="text/css">
+    
+        
+        <link rel="shortcut icon" href="./../../images/fortress-icon_16x16.png">
+    
+        <!-- Google Analytics -->
+        <script src="http://www.google-analytics.com/urchin.js" type="text/javascript"></script>
+        <script type="text/javascript">
+            _uacct = "UA-1358462-1";
+            urchinTracker();
+        </script>
+	</head>
+	<body>
+	    <div id="container">
+            <div id="header">
+                <div id="subProjectsNavBar">
+                    <a href="./../../">
+                        
+                        Apache Directory Project
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../apacheds">
+                        
+                        ApacheDS
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../studio">
+                        
+                        Apache Directory Studio
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../api">
+                        
+                        Apache LDAP API
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../mavibot">
+                        
+                        Mavibot
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../escimo">
+                        
+                        eSCIMo
+                        
+                    </a>
+                    &nbsp;|&nbsp;
+                    <a href="./../../fortress">
+                        
+                        <STRONG>Fortress</STRONG>
+                        
+                    </a>
+                </div><!-- subProjectsNavBar -->
+            </div><!-- header -->
+            <div id="content">
+                <div id="leftColumn">
+                    
+<div id="navigation">
+    
+    <ul>
+        <li>
+          <a href="http://bit.ly/1n9YlQT" target="_blank">
+            <img src="./../../images/ApacheConBudapest.png" width="125" height="125" alt="I'm Speaking at ApacheCon Europe 2014! Join me!" title="I'm Speaking at ApacheCon Europe 2014! Join me!" border="0" style="margin-bottom:-3px;"/>
+
+          </a>
+        </li>
+    </ul>
+    <h5>Fortress</h5>
+    <ul>
+        <li><a href="./../../fortress/">Home</a></li>
+        <li><a href="./../../fortress/">History</a></li>
+        <li><a href="./../../fortress/news.html">News</a></li>
+    </ul>
+    <h5>Downloads</h5>
+    <ul>
+	    <!--li><a href="./../../fortress/downloads.html">Core 1.0.0-RC39</a>&nbsp;&nbsp;<IMG src="./../../images/new_badge.gif" alt="" style="margin-bottom:-3px;" border="0"></li>
+        <li><a href="./../../fortress/downloads.html">EnMasse 1.0.0-RC39</a>&nbsp;&nbsp;<IMG src="./../../images/new_badge.gif" alt="" style="margin-bottom:-3px;" border="0"></li>
+        <li><a href="./../../fortress/downloads.html">Commander 1.0.0-RC39</a>&nbsp;&nbsp;<IMG src="./../../images/new_badge.gif" alt="" style="margin-bottom:-3px;" border="0"></li>
+        <li><a href="./../../fortress/downloads.html">Realm 1.0.0-RC39</a>&nbsp;&nbsp;<IMG src="./../../images/new_badge.gif" alt="" style="margin-bottom:-3px;" border="0"></li>
+        <li><a href="./../../fortress/download-old-versions.html">Older versions</a></li-->
+    </ul>
+    <h5>Getting Started</h5>
+    <ul>
+        <li><a href="./../../fortress/vision.html">Vision</a></li>
+        <li><a href="./../../fortress/issues.html">Issues</a></li>
+    </ul>
+    <h5>Documentation</h5>
+    <ul>
+        <li><a href="./../../fortress/overview.html">Overview</a></li>
+	    <li><a href="./../../fortress/quick-start.html">Quick Start</a></li>
+        <li><a href="./../../fortress/user-guide.html">Users Guide</a></li>
+        <!--li><a href="./../../fortress/gen-docs/latest/apidocs/">JavaDocs</a></li-->
+        <!--li><a href="./../../fortress/gen-docs/latest/xref/">Cross-Reference</a></li-->
+        <!--li><a href="./../../fortress/gen-docs/latest/">Generated Reports</a></li-->
+        <!--li><a href="./../../fortress/developer-guide.html">Developer Guide</a></li-->
+    </ul>
+    
+    
+    <h5>Support</h5>
+    <ul>
+        <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists &amp; IRC</a></li>
+        <li><a href="./../../sources.html">Sources</a></li>
+        <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+        <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+    </ul>
+    <h5>Community</h5>
+    <ul>
+        <li><a href="./../../contribute.html">How to Contribute</a></li>
+        <li><a href="./../../team.html">Team</a></li>
+        <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+        <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+    </ul>
+    <h5>About Apache</h5>
+    <ul>
+        <li><a href="http://www.apache.org/">Apache</a></li>
+        <li><a href="http://www.apache.org/licenses/">License</a></li>
+        <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+        <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+        <li><a href="http://www.apache.org/security/">Security</a></li>
+    </ul>
+    
+</div><!-- navigation -->
+
+                </div><!-- leftColumn -->
+                <div id="rightColumn">
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="1.5-how-to-impl-rbac.html">1.5 - How to implement ANSI RBAC</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="1-intro-rbac.html">1 - An Introduction to Role-Based Access Control ANSI INCITS 359-2004</a>
+		
+        </div>
+        <div class="nav_next">
+        
+			&nbsp;
+        
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+<h1 id="16-where-to-go-for-more-info">1.6 - Where to go for more info</h1>
+<ul>
+<li>
+<p>Download the ANSI RBAC specification: <a href="http://profsandhu.com/journals/tissec/ANSI+INCITS+359-2004.pdf">http://profsandhu.com/journals/tissec/ANSI+INCITS+359-2004.pdf</a></p>
+</li>
+<li>
+<p>Download working ANSI RBAC reference implementation, like Fortress ! </p>
+</li>
+</ul>
+
+
+    <div class="nav">
+        <div class="nav_prev">
+        
+            <a href="1.5-how-to-impl-rbac.html">1.5 - How to implement ANSI RBAC</a>
+		
+        </div>
+        <div class="nav_up">
+        
+            <a href="1-intro-rbac.html">1 - An Introduction to Role-Based Access Control ANSI INCITS 359-2004</a>
+		
+        </div>
+        <div class="nav_next">
+        
+			&nbsp;
+        
+        </div>
+        <div class="clearfix"></div>
+    </div>
+
+
+                </div><!-- rightColumn -->
+                <div id="endContent"></div>
+            </div><!-- content -->
+            <div id="footer">&copy; 2003-2014, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+                Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache Mavibot, Mavibot, Apache eSCIMo, eSCIMo, Fortress, Apache Fortress, EnMasse,
+                Apache EnMasse, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+            </div>
+        </div><!-- container -->
+    </body>
+</html>

Added: websites/staging/directory/trunk/content/fortress/user-guide/images/ARbac.png
==============================================================================
Binary file - no diff available.

Propchange: websites/staging/directory/trunk/content/fortress/user-guide/images/ARbac.png
------------------------------------------------------------------------------
    svn:mime-type = image/png