Features
Flexess > FeaturesMost of applications have access control rules hidden in the code. In Flexess we provide a way to model these security aspects as objects. All the key concepts like operations, roles and permissions are defined within the object model. The conditions, which control the access to objects, are modeled in Object Constraint Language. This model gives well defined consistent methodology for restricting the access.
In Flexess you need a single line of code to check if the user is authorized to perform the operation. The conditions under which access is granted are modeled with permissions. Permissions are access management rules that are associated with objects or operations. Permissions may have parameters. The conditions connect parameters of permissions and attributes of the users into a logical expression. This allows to define fine-grained rules, which controls access at the level of object instances. For example, clients may have access to only certain orders, which were submitted by them.
Security as an Aspect
Flexess is a first security framework that allows to separate the access management rules and the business logic of the application. We create a security model, which restricts the access to some application objects. This model is not bound to the source code of the application but is deployed separately to the Flexess server. Then the security rules can be changed in runtime even by the customer without modifying a line of code.
By User Management System we mean a system, which stores users. Flexess can be integrated with any Identity Manager, which supports LDAP. We also provide our own user management system, which stores user data in the relational database. The user data can be customized, so the administrator can configure, which attributes the user will have. This application provides the common Create-Read-Update-Delete functions and is delivered with web-based user management interface.
See our blog entries for more information:
Authentication
Flexess provides support for common used authentication methods or can be integrated with other security frameworks like Spring Security.
Flexess comes with the web-based administration tool, which allows to manage users and their roles. Application administrator creates role templates, creates new roles based on existing role templates and manages user assignments. The live demo of Flexess administration is available here.
