30 IBM WebSphere Portal for Multiplatforms V5 Handbook
To allow for pluggable implementations, the authorization component defines a
Service Provider Interface (SPI). WebSphere Portal 5.x has a built-in
authorization component implementation that plugs into the SPI so that it can
easily be replaced by other implementations.
The summarized access control facilities provided by PAC include:
Instance-level access control for the complete set of portal resources
Granting/revoking of permissions based on roles
Support for predefined action sets for convenient creation of roles based on
the intrinsic portal resource topology
Flexible blocking of permission inheritance on a per resource/per action set
basis
Notion of Private Resources to reduce ...