| sg481n | faf7f2d | 2017-09-22 17:17:23 +0000 | [diff] [blame] | 1 | .. This work is licensed under a Creative Commons Attribution 4.0 International License. |
| 2 | .. http://creativecommons.org/licenses/by/4.0 |
| 3 | .. Copyright © 2017 AT&T Intellectual Property. All rights reserved. |
| 4 | |
| sg481n | a9d2108 | 2017-09-23 14:26:06 +0000 | [diff] [blame] | 5 | AAF - Application Authorization Framework |
| sg481n | faf7f2d | 2017-09-22 17:17:23 +0000 | [diff] [blame] | 6 | ================================================== |
| 7 | .. The purpose of AAF (Application Authorization Framework) is to organize software authorizations so that applications, tools and services can match the access needed to perform job functions. |
| 8 | |
| 9 | AAF is designed to cover Fine-Grained Authorization, meaning that the Authorizations provided are able to used an Application's detailed authorizations, such as whether a user may be on a particular page, or has access to a particular Pub-SUB topic controlled within the App. |
| 10 | |
| 11 | This is a critical function for Cloud environments, as Services need to be able to be installed and running in a very short time, and should not be encumbered with local configurations of Users, Permissions and Passwords. |
| 12 | |
| 13 | To be effective during a computer transaction, Security must not only be secure, but very fast. Given that each transaction must be checked and validated for Authorization and Authentication, it is critical that all elements on this path perform optimally. |
| 14 | |
| 15 | |
| 16 | |
| 17 | .. toctree:: |
| sg481n | 72aacef | 2017-10-05 16:13:21 +0000 | [diff] [blame] | 18 | :maxdepth: 3 |
| sg481n | a9d2108 | 2017-09-23 14:26:06 +0000 | [diff] [blame] | 19 | |
| sg481n | faf7f2d | 2017-09-22 17:17:23 +0000 | [diff] [blame] | 20 | |
| 21 | |
| 22 | Introduction |
| 23 | ------------ |
| 24 | AAF contains some elements of Role Based Authorization, but includes Attribute Based Authorization elements as well. |
| 25 | |
| sg481n | 2bc3538 | 2017-09-23 15:50:15 +0000 | [diff] [blame] | 26 | |image0| |
| 27 | |
| sg481n | 02017aa | 2017-09-26 15:18:31 +0000 | [diff] [blame] | 28 | .. |image0| image:: aaf-object-model.jpg |
| sg481n | 2bc3538 | 2017-09-23 15:50:15 +0000 | [diff] [blame] | 29 | :height: 600px |
| 30 | :width: 800px |
| sg481n | faf7f2d | 2017-09-22 17:17:23 +0000 | [diff] [blame] | 31 | |
| 32 | |
| 33 | Essential Components |
| 34 | -------------------- |
| 35 | The core component to deliver this Enterprise Access is a RESTful service, with runtime instances registered in a Cloud Directory (DME2) and backed by a resilient Datastore (Cassandra as of release 1.3) |
| 36 | |
| 37 | The Data is managed by RESTful API, with Admin functions supplemented by Character Based User interface and certain GUI elements. |
| 38 | |
| 39 | -The Service accessible by provided Caching Clients and by specialized plugins |
| 40 | |
| 41 | -CADI (A Framework for providing Enterprise Class Authentication and Authorization with minimal configuration to Containers and Standalone Services) |
| 42 | |
| 43 | -Cassandra (GRID Core) |
| 44 | |
| 45 | -Hadoop Plugin (a plugin via Hadoop Group Mapper mechanism) |