Security Requirements

By Richard Li

+Security Requirements

Prev	Chapter�15.�Kernel Documentation	Next

Security Requirements

By Richard Li

OpenACS docs are written by the named authors, and may be edited by OpenACS documentation staff. -

Introduction

This document lists the requirements for the security system for the OpenACS. -

Vision Statement

Virtually all web sites support personalized content based on user identity. The level of personalization may be as simple as displaying the name of the user on certain pages or can be as sophisticated as dynamically recommending sections of site that the user may be interested in based on prior browsing history. In any case, the user's identity must be validated and made available to the rest of the system. In addition, sites such as ecommerce vendors require that the user identity be securely validated. -

Security System Overview

The security system consists of a number of subsystems.

Signed Cookies

Cookies play a key role in storing user information. However, since they are