JBAS-3374: Authorization Framework for Policy Decision Modules
For information on the behavior of the Authorization Modules,
For Authorization Modules behavior(Required, Requisite, Sufficient and Optional)
please refer to the javadoc for @see javax.security.auth.login.Configuration
The AuthorizationContext derives the AuthorizationInfo(configuration for the modules)
in the following way:
a) If there has been an injection of ApplicationPolicy, then it will be used.
Trust usecases may have a need to determine the roles of the target
principal which has been derived via a principal from another domain
by the Authentication Manager
An implementation of this interface may have to contact a trust provider
for additional information about the principal