JBAS-3374: Authorization Framework for Policy Decision Modules
For information on the behavior of the Authorization Modules,
For Authorization Modules behavior(Required, Requisite, Sufficient and Optional)
please refer to the javadoc for @see javax.security.auth.login.Configuration
The AuthorizationContext derives the AuthorizationInfo(configuration for the modules)
in the following way:
a) If there has been an injection of ApplicationPolicy, then it will be used.
Get the Current Roles for the authenticated Subject The AuthorizationManager will apply role generation and role
mapping logic configured for the security domain
Trust usecases may have a need to determine the roles of the target principal which has been derived via a
principal from another domain by the Authentication Manager An implementation of this interface may have to
contact a trust provider for additional information about the principal