On Time, On Point, On Budget!

Access Control List Web Service

The main idea of the project is to develop the universal access control service applicable in a wide variety of scenarios.

ACL Service provides the remote SOAP-based API for all functions of the system:

  • Registration of a new user security credentials
  • Removing an existing user credentials
  • Register a new group
  • Register a new group
  • Add member to a group
  • Add member to a group
  • Add member to a group
  • Add member to a group
  • Set/Reset the permission to the object for the user
  • Set/Reset the permission to the object for the group
  • Set/Reset the permission to the object for the group
  • Authenticate user in the service using the provided credentials
  • Check a specified permission of the user to the specified object
  • Check a specified permission of the user to the specified object
  • Get the registered permission set from the service

It provides the basic level of service configuration using the external XML configuration files (configuration is performed during the installation of the service). The application authorization is performed via the generated unique key that should be used in the parent application. The ACL service provides the basic permission cache on the service side (caching of resolved permissions and synchronous cache purging on changing of permissions)

The JAVA reference SDK implementation for the client-side integration is provided.

The technological stack has been used to build the ACL service:

  • Java (Spring Security) for the security layer support
  • Java (Spring Security) for the security layer support
  • Apache-Tomcat as a servlet container
  • Apache-Tomcat as a servlet container

Would you like to use our expertise in your project? Do not hesitate to contact us now