SOA Security

Peter Schober peter.schober at univie.ac.at
Tue Feb 24 08:45:37 EST 2015


* Arnal, Pascal <Pascal.Arnal at lacapitale.com> [2015-02-24 14:28]:
> Service accounts do not meet an authorization problem. For example
> employee who can not perform transfer beyond a certain rise.

Obviously you'd never authorize the subject based on the service
account, but on the identity presented by the service account as the
subject.
-peter


More information about the users mailing list