A {@link Principal} is an object used to connect to any kind of security mechanism. Example for this are the {@link javax.security.auth.spi.LoginModule login modules} that use principalsto process the login procedure.
A principal can be a member of a {@link Group}. A group is a principal itself and can therefore be a member of a group again.
Please note the following security considerations that need to be respected when implementing the PrincipalManager: All principals returned by this manager as well as {@link Group#members()} must respect access restrictionsthat may be present for the Session
this manager has been built for. The same applies for {@link #getGroupMembership(Principal)}.
|
|