DP Security: Overview

The DP Security system is a well-encapsulated, easily-pluggable security framework with a small footprint. Security services are provided via an abstracted CFC-based progrmming interface.

Using the services you can easily (well, more easily) create a full end-to-end web security system or use only what aspects of the system are attractive to you. For example you may implement only the end-user authentication services while doing all user information population via a dedicated database front-end or other client tool.

Features

The DP Security system provides many services and features:

  • The entire security system is abstracted into a single component instance (which can be maintained in any persistent scope). Each instance can use a different database (even a different database application). This allows you to run multiple instances of the system in the same application or across multiple applications using the same codebase.
  • Simple one-line authentication with invalid-attempt lock-out.
  • Password generation and validation services.
  • Simple one-line, boolean entitlement checking.
  • Security options are easily configurable.
  • Logical segmentation and easy customization of security assets. Assets are abstracted and encapsulated into CFC and these can be easily replaced/extended with custom CFCs.
  • Intelligent caching of security assets for performance and consistency. The caching system is easy to use providing real-time or delayed change recognition.
  • Logged-in users are represented as members in a collection of instantiated CFCs. This makes accessing security/identity-related information easy and streamlines the creation of user-communication services (alerts, broadcast messages, etc).

As noted the framework is well-defined and easily extended. As there are no user-interface requirement or indeed any interface assumptions made integration with existing systems should be straight-forward.

741 Current Sessions; Time: 10:21:18 08-09-2010; Tick: 78