Skip to main content

Jakarta Authorization 3.0

Release for Jakarta EE 11

Jakarta Authorization defines a low-level SPI for authorization modules, which are repositories of permissions facilitating subject based security by determining whether a given subject has a given permission, and algorithms to transform security constraints for specific containers (such as Jakarta Servlet or Jakarta Enterprise Beans) into these permissions.

The primary goal of this release is to make Jakarta Authorization future proof by adding a replacement for the Policy and generally the removal of security manager. Also make it more suitable for cloud deployments, by adding an option to add policy providers programmatically for a single application. This mirrors the API available for Jakarta Authentication.

New features, enhancements or additions

  • Register a policy provider programmatically per application AUTHORIZATION #98
  • Standarize the context ID for Servlet containers
  • Several convenience methods to make the API easier to use

Removals, deprecations or backwards incompatible changes

  • Design and implement replacement for Policy AUTHORIZATION #99
  • Remove references to the SecurityManager

Minimum Java SE Version

Java SE 17 or higher

Details

Compatible Implementations

Ballots

Plan Review

The Specification Committee Ballot completed on 11th July 2023.

Representative Representative for: Vote
Kenji Kazumura Fujitsu +1
Emily Jiang, Tom Watson IBM +1
Ed Bratt, Dmitry Kornilov Oracle +1
Andrew Pielage, Petr Aubrecht Payara +1
David Blevins, Jean-Louis Monteiro Tomitribe +1
Ivar Grimstad EE4J PMC +1
Marcelo Ancelmo, Abraham Marin-Perez Participant Members +1
Werner Keil Committer Members +1
Zhai Luchao Enterprise Members +1
Scott Stark Enterprise Members +1
Total 10

The ballot was run in the jakarta.ee-spec mailing list

Release Review

The Specification Committee Ballot concluded successfully on 2024-05-13 with the following results.

Representative Representative for: Vote
Kenji Kazumura Fujitsu +1
Tom Watson, Emily Jiang IBM +1
Ed Bratt, Dmitry Kornilov Oracle +1
Andrew Pielage Payara +1
David Blevins, Jean-Louis Monteiro Tomitribe +1
Ivar Grimstad EE4J PMC +1
Marcelo Ancelmo, Martijn Verburg Participant Members +1
Werner Keil Committer Members +1
Jun Qian Enterprise Members +1
Zhai Luchao Enterprise Members +1
Total 10

The ballot was run in the jakarta.ee-spec mailing list

Back to the top