Download FAQ History |  | API Search Feedback

> ## Using Java Authorization Contract for Containers

> Java Authorization Contract for Containers (JACC) is a set of security contracts defined for the EJB and Web containers. The containers in the J2EE server restrict client access to the resources and services they contain based on the client's identity.

> JACC contracts enhance this functionality by defining roles as collections of permissions and new subclasses of the `java.security.Permission` class. JACC contracts also provide a means for containers to make access decisions by operating on these permissions and defines the mechanism by which authorization providers are installed and configured for use by containers.

> JACC contracts provide the following benefits:

> - JACC moves security administration and decision-making responsibility from the container to the security providers.
> - JACC enables the use of a common policy across different security systems.
> - J2EE system integrators can integrate containers with existing authorization policy infrastructure.

Download FAQ History |  | API Search Feedback

All of the material in The Java Web Services Tutorial is copyright-protected and may not be published in other works without express written permission from Sun Microsystems.