Flexess 0.9.2

Flexess project provides an extensible security framework for Java applications. The name Flexess comes from: FLEXible accESS. Flexess is a component-based product, which adds to the application access management capabilities.
The solution allows to separate security aspects from the main application logic. The product provides the entire infrastructure starting from a tool, which allows creating an application security model to the administrative web application, which manages the assignments of the different access privileges to the users.
Main features:
- Security Modeling - Gives you possibility to create a model of the security features of the application. You can create a protected object Order, specify operations like "create", "read", "update", "delete" and provide constraints under which these operations are accessible.
- Role-Based Access Control - All the security aspects are modeled in terms of Users, Roles and Permissions.
- Parameterized Permissions - Permissions in Flexess are not strings, but can be parameterized with the attributes. For example, RegionalPermission has an attribute region and a constraint "Order.region=RegionalPermission .region". It means that this permission will be satisified, when the region attribute of Order matches the region attribute of the permission.
- Authorization - The minimal code can be done for authorization. To check if the user is authorized to create an order, you will need to invoke check(userId,order,"create").
- Authentication - Flexess provides an authentication module and can be integrated with existing authentication frameworks.
- Web Administration - Allows you to manage users, roles and permissions through the web interfaces.
- User Management - Maintains a database of users with customized user profiles.
Main components:
Security server - Server application to manage users, their roles, a centralized model storage.
Model designer - UI tool to create, edit the models and manage them on the server. Please note: Modeler requires the license. You can get EAP license after registration.
Client runtime - Runtime code to use in the client (business) application.
Enhancements:
- This release adds user list pagination support in SUM, and the ability to filter/search for users over UMI.
- The obfuscated dependency between client and server has been removed.
- The Java JCE update is avoided.
- The model is signed to prevent model corruption.