The Authorization Module provides a flexible authorization API that allows you to easily protect your beans and their methods by using a set of security annotations. These annotations provide some built-in authorization checks based on:

All authorization decision is based on the information stored by PicketLink IDM.

This module is based on Apache DeltaSpike Security module, which means DeltaSpike's dependencies are transitive and must be available in your project's classpath. Usually, these dependencies would be automatically added to your project.

The authorization module library is:

Please head to Chapter 11, Authorization, for more details.