DP Security: Overview
The DP Security system is a well-encapsulated, easily-pluggable security framework with a small footprint. Security services are provided via an abstracted CFC-based progrmming interface.
Using the services you can easily (well, more easily) create a full end-to-end web security system or use only what aspects of the system are attractive to you. For example you may implement only the end-user authentication services while doing all user information population via a dedicated database front-end or other client tool.
Features
The DP Security system provides many services and features:
- The entire security system is abstracted into a single component instance (which can be maintained in any persistent scope). Each instance can use a different database (even a different database application). This allows you to run multiple instances of the system in the same application or across multiple applications using the same codebase.
- Simple one-line authentication with invalid-attempt lock-out.
- Password generation and validation services.
- Simple one-line, boolean entitlement checking.
- Security options are easily configurable.
- Logical segmentation and easy customization of security assets. Assets are abstracted and encapsulated into CFC and these can be easily replaced/extended with custom CFCs.
- Intelligent caching of security assets for performance and consistency. The caching system is easy to use providing real-time or delayed change recognition.
- Logged-in users are represented as members in a collection of instantiated CFCs. This makes accessing security/identity-related information easy and streamlines the creation of user-communication services (alerts, broadcast messages, etc).
As noted the framework is well-defined and easily extended. As there are no user-interface requirement or indeed any interface assumptions made integration with existing systems should be straight-forward.