IBM BJ0NJML Integration Guide - Page 199

Interface Table Security T processObjectStructure(..) T routeData(..) To run these methods, the caller must retrieve a valid UserInfo object and pass it to the method to gain access to the secure layer. A UserInfo object is a serialized object that contains user details (user, password, locale, language, and time zone information). The system uses the UserInfo object for security purposes. The system uses Java RMI/JRMP. You can communicate to the system services by using a secure version of JRMP protocol using SSL. Interface Table Security Interface tables use the default database authentication and authorization. If authentication and authorization are in effect, external programs that read or write to the interface tables must provide proper authorization. To read from and write to the interface tables, the USERNAME and PASSWORD values are configured for the endpoint that implements the interface table handler. Outbound Router Handler Security The outbound router handlers have support for authorization and confidentiality. The enterprise bean, HTTP, JMS, Web service, and interface table handlers have support for security. Object-Level Authorization The system provides object-level authorization based on the security configuration set within the system. If an object or attribute is marked as readonly or hidden, then inbound message data processing is limited to data object queries. You cannot insert, update, or delete data in that object. The authorization level for a business object and object attribute can be configured in the Data Restrictions tab in the Security Groups application. Except for standard services, integration messages are not processed according to application-level authorization. The authorization that is used for system users controls the standard service authorization. A signature option can be assigned to a standard service to limit authorization to the users or groups that have authorization for a selected option. Security 185