JBAS-3374: Authorization Framework for Policy Decision Modules
For information on the behavior of the Authorization Modules,
For Authorization Modules behavior(Required, Requisite, Sufficient and Optional)
please refer to the javadoc for @see javax.security.auth.login.Configuration
The AuthorizationContext derives the AuthorizationInfo(configuration for the modules)
in the following way:
a) If there has been an injection of ApplicationPolicy, then it will be used.
Get the Current Roles for the authenticated Subject
The AuthorizationManager will apply role generation and role mapping
logic configured for the security domain
Trust usecases may have a need to determine the roles of the target
principal which has been derived via a principal from another domain
by the Authentication Manager
An implementation of this interface may have to contact a trust provider
for additional information about the principal