Using the Dynamic Proxy Approach to Introduce Role-Based Security to Java Data Objects

In this paper we present JDOSecure1, a novel security approach for the Java Data Objects specification. The objective of JDOSecure is to prevent unauthorized access to the data store while using the JDO API. Based on the dynamic proxy approach, JDOSecure is able to collaborate with any JDO implementation without source code modification or recompilation. It introduces a fine grained access control mechanism to the JDO persistence layer and allows the definition of role-based permissions. Moreover, since JDOSecure uses the Java Authentication and Authorization Service, it allows the pluggable integration of further authentication services.