| QualiPSo (Quality platform for Open Source Software) belongs to EU Sixth Framework major research projects. There are 22 partners over three continents and nine countries. It is the largest government support program in open source software area in European history and is committed to building high standards and quality of open source software to the relevant international industry standards and the corresponding quality systems, processes and testing methods to achieve the promotion of open source software applications in mainstream large-scale industrial systems.QualiPSo Factory as the QualiPSo's sub-project is committed to the Next Generation Forge Environment. And this article describes in detail the access control mechanism of services and resources in the whole QualiPSo Factory environment. The services' security access control, primarily in the service code level, we use JAAS to implement. The resources' security access control, mainly in the specific business-level, specifically referring to the resources' security access control of QualiPSo Factory collaborative services, we use XACML which is more flexible to implement.The main innovation of QualiPSo Factory is that it is the new generation of open source collaboration platform using the service-oriented architecture. The old greneration open-source collaborative development platform (such as Source Forge, Gforge, etc.) is naturally formed due to technical needs, they are rough integration with a lot of heterogeneous services with the poor services interaction, closely coupled and not conducive to expansion. The security access control of the resources and services in them has its inherent flaws. This paper combines the SOA design ideas and Extensible Access Control Markup Language XACML, describes in detail how the security module the core components of the Factory developed and applicated and presents a large-scale SOA-based cross-platform system security access control solutions which has important practical reference. |
PDF Full Text Request