Service user does not log on interactively. A service user is used, for example, to connect to a remote system with certain rights. Although a service user does not log on interactively, it is authenticated and the attributes contain a valid ticket. User mapping can be defined for a service users as well as assigning a role and general attributes to a service user.
Service users are defined as regular users with their own namespace.
The ServiceUserFactory can be accessed as follows:
UMFactory().getServiceUserFactory() |
The ServiceUserFactory provides the method getServiceUser(String uniqueName).
Service users have the rights that are needed to perform a certain task, for example, all necessary permissions to perform all actions, like delete and modify, on an Access Control List (ACL).
For more information about ACLs, see Access Control List (ACL).
Permission check example:
IUser createServiceUser(String uid) { |
The call name acts as target and the user name as action. With this granularity, you can specify exactly which application can instantiate which service users.