http://hdl.handle.net/10071/161 Mon, 20 Apr 2026 09:01:41 GMT 2026-04-20T09:01:41Z http://hdl.handle.net/10071/163 Título próprio: Zás – Aspect-Oriented Authorization Services (first take) Autoria: Zenida, Paulo; Sequeira, Manuel Menezes de; Henriques, Diogo; Serrão, Carlos Resumo: This paper proposes Zás, a novel, flexible, and expressive authorization mechanism for Java. Zás has been inspired by Ramnivas Laddad's proposal to modularize Java Authentication and Authorization Services (JAAS) using an Aspect-Oriented Programming (AOP) approach. Zás' aims are to be simultaneously very expressive, reusable, and easy to use and configure. Zás allows authorization services to be non-invasively added to existing code. It also cohabits with a wide range of authentication mechanisms. Zás uses Java 5 annotations to specify permission requirements to access controlled resources. These requirements may be changed directly during execution. They may also be calculated by client supplied permission classes before each access to the corresponding resource. These features, together with several mechanisms for permission propagation, expression of trust relationships, depth of access control, etc., make Zás, we believe, an interesting starting point for further research on the use of AOP for authorization. Descrição: O trabalho descrito neste relatório deu origem a um artigo apresentado na conferência ICSOFT 2006. Sun, 01 Jan 2006 00:00:00 GMT http://hdl.handle.net/10071/163 2006-01-01T00:00:00Z