Enabling data grid authorization

WebSphere® eXtreme Scale provides several security endpoints to integrate custom mechanisms. In the local programming model, the main security function is authorization, and has no authentication support. You must authenticate independently from the already existing WebSphere Application Server authentication. However, you can use the provided plug-ins to obtain and validate Subject objects.

• Enable local security with the ObjectGrid XML descriptor XML file.
  The secure-objectgrid-definition.xml file that is used in the ObjectGridSample enterprise application sample is shown in the following example. Set the securityEnabled attribute to true to enable security.

  <objectGrids>
      <objectGrid name="secureClusterObjectGrid" securityEnabled="true"
          authorizationMechanism="AUTHORIZATION_MECHANISM_JAAS">
      ...
  </objectGrids>
  

• Enable local security programmatically.
  To create an ObjectGrid using the ObjectGrid.setSecurityEnabled method, call the following method on the ObjectGrid interface:

  /**
   * Enable the ObjectGrid security
   */
  void setSecurityEnabled();