Security Developer Guide

Introduction

Security Modules

No	OSGI Module	Description
1	identity-manager	Manages system login, sessions and RBAC. Main Module that controls overall system identity and access permissions.
2	channel-manager	Controls HTTP/HTTS tunnels. Intercepts all incoming and outgoing requests, applies encryption, authorizes Web Tokens.
3	security-Manager	Contains services and tools for message encryption/decryption, PGPKey management
4	object-relation-manager	Manages relations between objects
5	key-server	PGP KeyServer. Stores and manages PGP Public keys. Available only for authorized access.

Authentication and Authorization (RBAC)

SS uses JAAS Module for authentication and authorization. Every service in the module assigned intercept (hook) routines that controls access to the service.