authorization-features.html - shiro-site - Git at Google

 <!DOCTYPE html>
 <!--
    Licensed to the Apache Software Foundation (ASF) under one or more
    contributor license agreements.  See the NOTICE file distributed with
    this work for additional information regarding copyright ownership.
    The ASF licenses this file to You under the Apache License, Version 2.0
    (the "License"); you may not use this file except in compliance with
    the License.  You may obtain a copy of the License at

         http://www.apache.org/licenses/LICENSE-  2.0

    Unless required by applicable law or agreed to in writing, software
    distributed under the License is distributed on an "AS IS" BASIS,
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
 -->
 <html lang="en">
   <head>
     <meta charset="utf-8"/>
     <title>Authorization Features | Apache Shiro</title>
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <meta name="keywords" content='documentation,authorization,features'>
     <meta name="generator" content="JBake">
     <meta name="google-site-verification" content="QIax6uT5UX3enoU0G8Pz2pXbQ45KaQuHZ3nCh9V27mw">
     <meta name="google-site-verification" content="ecFap6dWJgS_GCCtxmJQJ_nFYQhM6EgSpBPZDU7xsCE">
     <meta name="google-site-verification" content="gBTYOG8lMfNb_jrWrH3kFbudpEs_WrAJ2lb2-zLRaso"/>
     <meta name="msvalidate.01" content="0B57EB46CBFAD8FD45008D2DB6B6C68C">

     <meta property="og:title" content="Authorization Features | Apache Shiro"/>
     <meta property="og:type" content="article"/>
       <meta name="twitter:card" content="summary" />
     <meta name="twitter:site" content="@ApacheShiro" />
     <meta property="article:modification_time" content="2010-03-18T00:00:00Z"/>
     <meta property="article:tag" content='documentation'/>
     <meta property="article:tag" content='authorization'/>
     <meta property="article:tag" content='features'/>
     <meta property="og:locale" content="en_US" />
     <meta property="og:url" content='https://shiro.apache.org/authorization-features.html'/>
     <meta property="og:image" content='images/shiro-featured-image.png'/>
     <meta property="og:image:width" content='1200'/>
     <meta property="og:image:height" content='628'/>
     <meta property="og:site_name" content="Apache Shiro"/>

     <!-- Le styles -->
     <link href="css/bootstrap.min.css" rel="stylesheet">
     <link href="bootstrap-icons-1.5.0/bootstrap-icons.css" rel="stylesheet">
     <link href="css/asciidoctor.css" rel="stylesheet">
     <link href="css/base.css" rel="stylesheet">
     <link href="highlight.js-11.2.0/styles/default.min.css" rel="stylesheet">
     <link href="css/gh-pages/gh-fork-ribbon.css" rel="stylesheet"/>

     <!-- Fav and touch icons -->
     <!--<link rel="apple-touch-icon-precomposed" sizes="144x144" href="../assets/ico/apple-touch-icon-144-precomposed.png">
     <link rel="apple-touch-icon-precomposed" sizes="114x114" href="../assets/ico/apple-touch-icon-114-precomposed.png">
     <link rel="apple-touch-icon-precomposed" sizes="72x72" href="../assets/ico/apple-touch-icon-72-precomposed.png">
     <link rel="apple-touch-icon-precomposed" href="../assets/ico/apple-touch-icon-57-precomposed.png">-->
     <link rel="shortcut icon" href="favicon.ico">

     <!-- Matomo -->
     <script>
         var _paq = window._paq = window._paq || [];
         /* tracker methods like "setCustomDimension" should be called before "trackPageView" */
         _paq.push(['disableCookies']);
         _paq.push(['trackPageView']);
         _paq.push(['enableLinkTracking']);
         (function() {
             var u="//matomo.privacy.apache.org/";
             _paq.push(['setTrackerUrl', u+'matomo.php']);
             _paq.push(['setSiteId', '2']);
             var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];
             g.async=true; g.src=u+'matomo.js'; s.parentNode.insertBefore(g,s);
         })();
     </script>
     <!-- End Matomo Code -->
   </head>
   <body>
     <div id="top-bar"></div>
     <a class="github-fork-ribbon right-top" href="https://github.com/apache/shiro" title="Fork me on GitHub">Fork me on GitHub</a>

     <div id="wrap">

       <div class="masthead">
         <p class="lead">
           <a href="index.html"><img src="images/apache-shiro-logo.png" style="height:100px; width:auto; vertical-align: bottom; margin-top: 20px;" alt="Apache Shiro Logo"></a>
           <span class="tagline">Simple. Java. Security.</span>
           <a class="pull-right" href="https://www.apache.org/events/current-event.html">
             <img style="padding-top: 8px" src="https://www.apache.org/events/current-event-125x125.png" alt="Apache Software Foundation Event Banner"/>
           </a>
         </p>
       </div>

 	<!-- Fixed navbar -->
     <nav class="navbar navbar-expand-lg navbar-light bg-light shadow-sm mb-4">
       <div class="container-fluid">
         <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarSupportedContent" aria-controls="navbarSupportedContent" aria-expanded="false" aria-label="Toggle navigation">
           <span class="navbar-toggler-icon"></span>
         </button>

         <div class="collapse navbar-collapse" id="navbarSupportedContent">
           <ul class="navbar-nav me-auto mb-2 mb-lg-0">
             <li class="nav-item">
               <a class="nav-link" href="get-started.html">Get Started</a>
             </li>
             <li class="nav-item">
               <a class="nav-link" href="documentation.html">Docs</a>
             </li>

             <li class="nav-item dropdown">
               <a class="nav-link dropdown-toggle" href="#" id="navbarDropdown-webapps" role="button" data-bs-toggle="dropdown" aria-expanded="false">
                 Web Apps
               </a>
               <ul class="dropdown-menu" aria-labelledby="navbarDropdown-webapps">
                 <li><a class="dropdown-item" href="web.html">General</a></li>
                 <li><a class="dropdown-item" href="jaxrs.html">JAX-RS</a></li>
                 <li><a class="dropdown-item" href="jakarta-ee.html">Jakarta EE</a></li>
                 <li><hr class="dropdown-divider"></li>
                 <li><a class="dropdown-item" href="web-features.html">Features</a></li>
               </ul>
             </li>

             <li><a class="nav-link" href="features.html">Features</a></li>

             <!-- integrations -->
             <li class="nav-item dropdown">
               <a class="nav-link dropdown-toggle" href="#" id="navbarDropdown-integrations" role="button" data-bs-toggle="dropdown" aria-expanded="false">
                 Integrations
               </a>
               <ul class="dropdown-menu" aria-labelledby="navbarDropdown-integrations">
                 <li><a class="dropdown-item" href="spring-boot.html">Spring</a></li>
                 <li><a class="dropdown-item" href="guice.html">Guice</a></li>
                 <li><hr class="dropdown-divider"></li>
                 <li><a class="dropdown-item" href="integration.html">Third-Party Integrations</a></li>
               </ul>
             </li>

             <!-- Community -->
             <li class="nav-item dropdown">
               <a class="nav-link dropdown-toggle" href="#" id="navbarDropdown-community" role="button" data-bs-toggle="dropdown" aria-expanded="false">
                 Community
               </a>
               <ul class="dropdown-menu" aria-labelledby="navbarDropdown-community">
                 <li><a class="dropdown-item" href="forums.html">Community Forums</a></li>
                 <li><a class="dropdown-item" href="mailing-lists.html">Mailing Lists</a></li>
                 <li><a class="dropdown-item" href="articles.html">Articles</a></li>
                 <li><a class="dropdown-item" href="news.html">News</a></li>
                 <li><a class="dropdown-item" href="events.html">Events</a></li>
                 <li><hr class="dropdown-divider"></li>
                 <li><a class="dropdown-item" href="community.html">More</a></li>
               </ul>
             </li>

             <!-- About -->
             <li class="nav-item dropdown">
               <a class="nav-link dropdown-toggle" href="#" id="navbarDropdown-about" role="button" data-bs-toggle="dropdown" aria-expanded="false">
                 About
               </a>
               <ul class="dropdown-menu" aria-labelledby="navbarDropdown-about">
                 <li><a class="dropdown-item" href="about.html">About</a></li>
                 <li><a class="dropdown-item" href="privacy-policy.html">Privacy Policy</a></li>
                 <li><a class="dropdown-item" href="security-reports.html">Vulnerability Reports</a></li>
               </ul>
             </li>
           </ul>

           <ul class="d-flex justify-content-end navbar-nav mb-2 mb-lg-0">
             <!-- The ASF -->
             <li class="nav-item dropdown">
               <a class="nav-link dropdown-toggle" href="#" id="navbarDropdown-asf" role="button" data-bs-toggle="dropdown" aria-expanded="false">
                 Apache Software Foundation
               </a>
               <ul class="dropdown-menu" aria-labelledby="navbarDropdown-asf">
                 <li><a class="dropdown-item" href="https://www.apache.org/">Apache Homepage</a></li>
                 <li><a class="dropdown-item" href="https://www.apache.org/licenses/">License</a></li>
                 <li><a class="dropdown-item" href="https://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
                 <li><a class="dropdown-item" href="https://www.apache.org/foundation/thanks.html">Thanks</a></li>
                 <li><a class="dropdown-item" href="https://www.apache.org/security/">Security</a></li>
               </ul>
             </li>
           </ul>
         </div>
       </div>
     </nav>

 	<div class="page-header">
 		<h1>Authorization Features</h1>
 	</div>


   <div class="admonitionblock tip">
     <table>
       <tbody>
         <tr>
           <td class="icon">
             <div class="title">Handy Hint</div>
           </td>
           <td class="content">
             <div class="title">Shiro v1 version notice</div>
             <div class="paragraph">
               <p>As of 2024-03-01, Shiro v1 will soon be superseded by v2.<p>
             </div>
           </td>
         </tr>
       </tbody>
     </table>
   </div>

 <div id="preamble">
 <div class="sectionbody">
 <div class="paragraph">
 <p>Authorization, also called access control, is the process of determining access rights to resources in an application.
 In other words, determining <strong>"who has access to what"</strong>.
 Authorization is used to answer security questions like, "is the user allowed to edit accounts", "is this user allowed to view this web page", "does this user have access to this button"?
 These are all decisions determining what a user has access to and therefore all represent authorization checks.</p>
 </div>
 <div class="paragraph">
 <p>Authorization is a critical element of any application, but it can quickly become very complex.
 Shiro&#8217;s goal is to eliminate much of the complexity around authorization so that you can more easily build secure software.
 Below is a highlight of the Shiro authorization features.</p>
 </div>
 </div>
 </div>
 <div class="sect1">
 <h2 id="features">Features</h2>
 <div class="sectionbody">
 <div class="ulist">
 <ul>
 <li>
 <p><strong>Subject-based</strong></p>
 <div class="paragraph">
 <p>Almost everything you do in Shiro is based on the currently executing user, called a Subject.
 And you can easily access the subject retrieve the Subject and checks its roles, permissions, or other relevant attributes anywhere in your code.
 This makes it easier for you to understand and work with Shiro in your applications.</p>
 </div>
 </li>
 <li>
 <p><strong>Checks based on roles or permissions</strong></p>
 <div class="paragraph">
 <p>Since the complexity of authorization differs greatly between applications, Shiro is designed to be flexible, supporting both role-based security and permission-based security based on your projects needs.</p>
 </div>
 </li>
 <li>
 <p><strong>Powerful and intuitive permission syntax</strong></p>
 <div class="paragraph">
 <p>As an option, Shiro provides an out-of-the-box permission syntax, called Wildcard Permissions, that help you model the fine-grained access policies your application may have.
 By using Shiro&#8217;s Wildcard Permissions you get an easy-to-process and human-readable syntax.
 Moreover, you don&#8217;t have to go through the time-consuming effort and complexity of creating your own method for representing your access policies.</p>
 </div>
 </li>
 <li>
 <p><strong>Multiple enforcement options</strong></p>
 <div class="paragraph">
 <p>Authorization checks in Shiro can be done through in-code checks, JDK 1.5 annotations, AOP, and JSP/GSP Taglibs.
 Shiro&#8217;s goal is to give you the choice to use the option you think are best based on your preferences and project needs.</p>
 </div>
 </li>
 <li>
 <p><strong>Strong caching support</strong></p>
 <div class="paragraph">
 <p>Any of the modern open-source and/or enterprise caching products can be plugged in to Shiro to provide a fast and efficient user-experience.
 For authorization, caching is crucial for performance in larger environments or with more complex policies using back-end security data sources.</p>
 </div>
 </li>
 <li>
 <p><strong>Pluggable data sources</strong></p>
 <div class="paragraph">
 <p>Shiro uses pluggable data access objects, referred to as Realms, to connect to security data sources where you keep your access control information, like an LDAP server or a relational database.
 To help you avoid building and maintaining integrations yourself, Shiro provides out-of-the-box realms for popular data sources like LDAP, Active Directory, and JDBC.
 If needed, you can also create your own realms to support specific functionality not included in the basic realms.</p>
 </div>
 </li>
 <li>
 <p><strong>Supports any data model</strong></p>
 <div class="paragraph">
 <p>Shiro can support any data model for access control — it doesn&#8217;t force a model on you.
 Your realm implementation ultimately decides how your permissions and roles are grouped together and whether to return a "yes" or a "no" answer to Shiro.
 This feature allows you to architect your application in the manner you chose and Shiro will bend to support you.</p>
 </div>
 </li>
 </ul>
 </div>
 </div>
 </div>
 	<hr />

 </div>

     <div class="footer-padding"></div>

     <div class="container-fluid pt-2 border-top" id="custom-footer">
       <footer class="row justify-content-between align-items-center">
         <div class=" col-md-5">
           <div class="copyright-footer justify-content-start">
             <a href="https://www.apache.org/foundation/contributing.html">Donate to the ASF</a>&nbsp;|&nbsp;
             <a href="https://www.apache.org/licenses/LICENSE-2.0.html">License</a>&nbsp;
             <p class="text-muted">Copyright &copy; 2008-2024 The Apache Software Foundation</p>
           </div>
         </div>

         <div class="d-flex justify-content-center col-md-1">
           <a class="btn btn-social"><span class="social-icon social-twitter"><i class="bi bi-twitter"></i></span></a>
           <a class="btn btn-social"><span class="social-icon social-facebook"><i class="bi bi-facebook"></i></span></a>
           <a class="btn btn-social"><span class="social-icon social-linkedin"><i class="bi bi-linkedin"></i></span></a>
         </div>

         <div class="d-flex justify-content-end col-md-4" id="editThisPage">
           <input type="hidden" id="ghEditPage" value="https://github.com/apache/shiro-site/edit/main/src/site/content/authorization-features.adoc"/>
         </div>

         <div class="d-flex col-md-2 justify-content-end" style="position: relative">
           <div class="footer-shield"></div>
         </div>
       </footer>
     </div>


     <!-- Le javascript
     ================================================== -->
     <!-- Placed at the end of the document so the pages load faster -->
     <script src="js/bootstrap.min.js"></script>
     <script src="highlight.js-11.2.0/highlight.min.js"></script>
     <script src="js/shiro.js"></script>

     <script>
         docReady(
           addPageEditLink()
       );
     </script>
     <script>hljs.highlightAll();</script>

     </body>
 </html>
	<!DOCTYPE html>
	<!--
	Licensed to the Apache Software Foundation (ASF) under one or more
	contributor license agreements. See the NOTICE file distributed with
	this work for additional information regarding copyright ownership.
	The ASF licenses this file to You under the Apache License, Version 2.0
	(the "License"); you may not use this file except in compliance with
	the License. You may obtain a copy of the License at

	http://www.apache.org/licenses/LICENSE- 2.0

	Unless required by applicable law or agreed to in writing, software
	distributed under the License is distributed on an "AS IS" BASIS,
	WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
	See the License for the specific language governing permissions and
	limitations under the License.
	-->
	<html lang="en">
	<head>
	<meta charset="utf-8"/>
	<title>Authorization Features \| Apache Shiro</title>
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
	<meta name="keywords" content='documentation,authorization,features'>
	<meta name="generator" content="JBake">
	<meta name="google-site-verification" content="QIax6uT5UX3enoU0G8Pz2pXbQ45KaQuHZ3nCh9V27mw">
	<meta name="google-site-verification" content="ecFap6dWJgS_GCCtxmJQJ_nFYQhM6EgSpBPZDU7xsCE">
	<meta name="google-site-verification" content="gBTYOG8lMfNb_jrWrH3kFbudpEs_WrAJ2lb2-zLRaso"/>
	<meta name="msvalidate.01" content="0B57EB46CBFAD8FD45008D2DB6B6C68C">

	<meta property="og:title" content="Authorization Features \| Apache Shiro"/>
	<meta property="og:type" content="article"/>
	<meta name="twitter:card" content="summary" />
	<meta name="twitter:site" content="@ApacheShiro" />
	<meta property="article:modification_time" content="2010-03-18T00:00:00Z"/>
	<meta property="article:tag" content='documentation'/>
	<meta property="article:tag" content='authorization'/>
	<meta property="article:tag" content='features'/>
	<meta property="og:locale" content="en_US" />
	<meta property="og:url" content='https://shiro.apache.org/authorization-features.html'/>
	<meta property="og:image" content='images/shiro-featured-image.png'/>
	<meta property="og:image:width" content='1200'/>
	<meta property="og:image:height" content='628'/>
	<meta property="og:site_name" content="Apache Shiro"/>

	<!-- Le styles -->
	<link href="css/bootstrap.min.css" rel="stylesheet">
	<link href="bootstrap-icons-1.5.0/bootstrap-icons.css" rel="stylesheet">
	<link href="css/asciidoctor.css" rel="stylesheet">
	<link href="css/base.css" rel="stylesheet">
	<link href="highlight.js-11.2.0/styles/default.min.css" rel="stylesheet">
	<link href="css/gh-pages/gh-fork-ribbon.css" rel="stylesheet"/>

	<!-- Fav and touch icons -->
	<!--<link rel="apple-touch-icon-precomposed" sizes="144x144" href="../assets/ico/apple-touch-icon-144-precomposed.png">
	<link rel="apple-touch-icon-precomposed" sizes="114x114" href="../assets/ico/apple-touch-icon-114-precomposed.png">
	<link rel="apple-touch-icon-precomposed" sizes="72x72" href="../assets/ico/apple-touch-icon-72-precomposed.png">
	<link rel="apple-touch-icon-precomposed" href="../assets/ico/apple-touch-icon-57-precomposed.png">-->
	<link rel="shortcut icon" href="favicon.ico">

	<!-- Matomo -->
	<script>
	var _paq = window._paq = window._paq \|\| [];
	/* tracker methods like "setCustomDimension" should be called before "trackPageView" */
	_paq.push(['disableCookies']);
	_paq.push(['trackPageView']);
	_paq.push(['enableLinkTracking']);
	(function() {
	var u="//matomo.privacy.apache.org/";
	_paq.push(['setTrackerUrl', u+'matomo.php']);
	_paq.push(['setSiteId', '2']);
	var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];
	g.async=true; g.src=u+'matomo.js'; s.parentNode.insertBefore(g,s);
	})();
	</script>
	<!-- End Matomo Code -->
	</head>
	<body>
	<div id="top-bar"></div>
	<a class="github-fork-ribbon right-top" href="https://github.com/apache/shiro" title="Fork me on GitHub">Fork me on GitHub</a>

	<div id="wrap">

	<div class="masthead">
	<p class="lead">
	<a href="index.html"><img src="images/apache-shiro-logo.png" style="height:100px; width:auto; vertical-align: bottom; margin-top: 20px;" alt="Apache Shiro Logo"></a>
	<span class="tagline">Simple. Java. Security.</span>
	<a class="pull-right" href="https://www.apache.org/events/current-event.html">
	<img style="padding-top: 8px" src="https://www.apache.org/events/current-event-125x125.png" alt="Apache Software Foundation Event Banner"/>
	</a>
	</p>
	</div>

	<!-- Fixed navbar -->
	<nav class="navbar navbar-expand-lg navbar-light bg-light shadow-sm mb-4">
	<div class="container-fluid">
	<button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarSupportedContent" aria-controls="navbarSupportedContent" aria-expanded="false" aria-label="Toggle navigation">
	<span class="navbar-toggler-icon"></span>
	</button>

	<div class="collapse navbar-collapse" id="navbarSupportedContent">
	<ul class="navbar-nav me-auto mb-2 mb-lg-0">
	<li class="nav-item">
	<a class="nav-link" href="get-started.html">Get Started</a>
	</li>
	<li class="nav-item">
	<a class="nav-link" href="documentation.html">Docs</a>
	</li>

	<li class="nav-item dropdown">
	<a class="nav-link dropdown-toggle" href="#" id="navbarDropdown-webapps" role="button" data-bs-toggle="dropdown" aria-expanded="false">
	Web Apps
	</a>
	<ul class="dropdown-menu" aria-labelledby="navbarDropdown-webapps">
	<li><a class="dropdown-item" href="web.html">General</a></li>
	<li><a class="dropdown-item" href="jaxrs.html">JAX-RS</a></li>
	<li><a class="dropdown-item" href="jakarta-ee.html">Jakarta EE</a></li>
	<li><hr class="dropdown-divider"></li>
	<li><a class="dropdown-item" href="web-features.html">Features</a></li>
	</ul>
	</li>

	<li><a class="nav-link" href="features.html">Features</a></li>

	<!-- integrations -->
	<li class="nav-item dropdown">
	<a class="nav-link dropdown-toggle" href="#" id="navbarDropdown-integrations" role="button" data-bs-toggle="dropdown" aria-expanded="false">
	Integrations
	</a>
	<ul class="dropdown-menu" aria-labelledby="navbarDropdown-integrations">
	<li><a class="dropdown-item" href="spring-boot.html">Spring</a></li>
	<li><a class="dropdown-item" href="guice.html">Guice</a></li>
	<li><hr class="dropdown-divider"></li>
	<li><a class="dropdown-item" href="integration.html">Third-Party Integrations</a></li>
	</ul>
	</li>

	<!-- Community -->
	<li class="nav-item dropdown">
	<a class="nav-link dropdown-toggle" href="#" id="navbarDropdown-community" role="button" data-bs-toggle="dropdown" aria-expanded="false">
	Community
	</a>
	<ul class="dropdown-menu" aria-labelledby="navbarDropdown-community">
	<li><a class="dropdown-item" href="forums.html">Community Forums</a></li>
	<li><a class="dropdown-item" href="mailing-lists.html">Mailing Lists</a></li>
	<li><a class="dropdown-item" href="articles.html">Articles</a></li>
	<li><a class="dropdown-item" href="news.html">News</a></li>
	<li><a class="dropdown-item" href="events.html">Events</a></li>
	<li><hr class="dropdown-divider"></li>
	<li><a class="dropdown-item" href="community.html">More</a></li>
	</ul>
	</li>

	<!-- About -->
	<li class="nav-item dropdown">
	<a class="nav-link dropdown-toggle" href="#" id="navbarDropdown-about" role="button" data-bs-toggle="dropdown" aria-expanded="false">
	About
	</a>
	<ul class="dropdown-menu" aria-labelledby="navbarDropdown-about">
	<li><a class="dropdown-item" href="about.html">About</a></li>
	<li><a class="dropdown-item" href="privacy-policy.html">Privacy Policy</a></li>
	<li><a class="dropdown-item" href="security-reports.html">Vulnerability Reports</a></li>
	</ul>
	</li>
	</ul>

	<ul class="d-flex justify-content-end navbar-nav mb-2 mb-lg-0">
	<!-- The ASF -->
	<li class="nav-item dropdown">
	<a class="nav-link dropdown-toggle" href="#" id="navbarDropdown-asf" role="button" data-bs-toggle="dropdown" aria-expanded="false">
	Apache Software Foundation
	</a>
	<ul class="dropdown-menu" aria-labelledby="navbarDropdown-asf">
	<li><a class="dropdown-item" href="https://www.apache.org/">Apache Homepage</a></li>
	<li><a class="dropdown-item" href="https://www.apache.org/licenses/">License</a></li>
	<li><a class="dropdown-item" href="https://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
	<li><a class="dropdown-item" href="https://www.apache.org/foundation/thanks.html">Thanks</a></li>
	<li><a class="dropdown-item" href="https://www.apache.org/security/">Security</a></li>
	</ul>
	</li>
	</ul>
	</div>
	</div>
	</nav>

	<div class="page-header">
	<h1>Authorization Features</h1>
	</div>


	<div class="admonitionblock tip">
	<table>
	<tbody>
	<tr>
	<td class="icon">
	<div class="title">Handy Hint</div>
	</td>
	<td class="content">
	<div class="title">Shiro v1 version notice</div>
	<div class="paragraph">
	<p>As of 2024-03-01, Shiro v1 will soon be superseded by v2.<p>
	</div>
	</td>
	</tr>
	</tbody>
	</table>
	</div>

	<div id="preamble">
	<div class="sectionbody">
	<div class="paragraph">
	<p>Authorization, also called access control, is the process of determining access rights to resources in an application.
	In other words, determining <strong>"who has access to what"</strong>.
	Authorization is used to answer security questions like, "is the user allowed to edit accounts", "is this user allowed to view this web page", "does this user have access to this button"?
	These are all decisions determining what a user has access to and therefore all represent authorization checks.</p>
	</div>
	<div class="paragraph">
	<p>Authorization is a critical element of any application, but it can quickly become very complex.
	Shiro’s goal is to eliminate much of the complexity around authorization so that you can more easily build secure software.
	Below is a highlight of the Shiro authorization features.</p>
	</div>
	</div>
	</div>
	<div class="sect1">
	<h2 id="features">Features</h2>
	<div class="sectionbody">
	<div class="ulist">
	<ul>
	<li>
	<p><strong>Subject-based</strong></p>
	<div class="paragraph">
	<p>Almost everything you do in Shiro is based on the currently executing user, called a Subject.
	And you can easily access the subject retrieve the Subject and checks its roles, permissions, or other relevant attributes anywhere in your code.
	This makes it easier for you to understand and work with Shiro in your applications.</p>
	</div>
	</li>
	<li>
	<p><strong>Checks based on roles or permissions</strong></p>
	<div class="paragraph">
	<p>Since the complexity of authorization differs greatly between applications, Shiro is designed to be flexible, supporting both role-based security and permission-based security based on your projects needs.</p>
	</div>
	</li>
	<li>
	<p><strong>Powerful and intuitive permission syntax</strong></p>
	<div class="paragraph">
	<p>As an option, Shiro provides an out-of-the-box permission syntax, called Wildcard Permissions, that help you model the fine-grained access policies your application may have.
	By using Shiro’s Wildcard Permissions you get an easy-to-process and human-readable syntax.
	Moreover, you don’t have to go through the time-consuming effort and complexity of creating your own method for representing your access policies.</p>
	</div>
	</li>
	<li>
	<p><strong>Multiple enforcement options</strong></p>
	<div class="paragraph">
	<p>Authorization checks in Shiro can be done through in-code checks, JDK 1.5 annotations, AOP, and JSP/GSP Taglibs.
	Shiro’s goal is to give you the choice to use the option you think are best based on your preferences and project needs.</p>
	</div>
	</li>
	<li>
	<p><strong>Strong caching support</strong></p>
	<div class="paragraph">
	<p>Any of the modern open-source and/or enterprise caching products can be plugged in to Shiro to provide a fast and efficient user-experience.
	For authorization, caching is crucial for performance in larger environments or with more complex policies using back-end security data sources.</p>
	</div>
	</li>
	<li>
	<p><strong>Pluggable data sources</strong></p>
	<div class="paragraph">
	<p>Shiro uses pluggable data access objects, referred to as Realms, to connect to security data sources where you keep your access control information, like an LDAP server or a relational database.
	To help you avoid building and maintaining integrations yourself, Shiro provides out-of-the-box realms for popular data sources like LDAP, Active Directory, and JDBC.
	If needed, you can also create your own realms to support specific functionality not included in the basic realms.</p>
	</div>
	</li>
	<li>
	<p><strong>Supports any data model</strong></p>
	<div class="paragraph">
	<p>Shiro can support any data model for access control — it doesn’t force a model on you.
	Your realm implementation ultimately decides how your permissions and roles are grouped together and whether to return a "yes" or a "no" answer to Shiro.
	This feature allows you to architect your application in the manner you chose and Shiro will bend to support you.</p>
	</div>
	</li>
	</ul>
	</div>
	</div>
	</div>
	<hr />

	</div>

	<div class="footer-padding"></div>

	<div class="container-fluid pt-2 border-top" id="custom-footer">
	<footer class="row justify-content-between align-items-center">
	<div class=" col-md-5">
	<div class="copyright-footer justify-content-start">
	<a href="https://www.apache.org/foundation/contributing.html">Donate to the ASF</a> \|
	<a href="https://www.apache.org/licenses/LICENSE-2.0.html">License</a>
	<p class="text-muted">Copyright © 2008-2024 The Apache Software Foundation</p>
	</div>
	</div>

	<div class="d-flex justify-content-center col-md-1">
	<a class="btn btn-social"><span class="social-icon social-twitter"><i class="bi bi-twitter"></i></span></a>
	<a class="btn btn-social"><span class="social-icon social-facebook"><i class="bi bi-facebook"></i></span></a>
	<a class="btn btn-social"><span class="social-icon social-linkedin"><i class="bi bi-linkedin"></i></span></a>
	</div>

	<div class="d-flex justify-content-end col-md-4" id="editThisPage">
	<input type="hidden" id="ghEditPage" value="https://github.com/apache/shiro-site/edit/main/src/site/content/authorization-features.adoc"/>
	</div>

	<div class="d-flex col-md-2 justify-content-end" style="position: relative">
	<div class="footer-shield"></div>
	</div>
	</footer>
	</div>


	<!-- Le javascript
	================================================== -->
	<!-- Placed at the end of the document so the pages load faster -->
	<script src="js/bootstrap.min.js"></script>
	<script src="highlight.js-11.2.0/highlight.min.js"></script>
	<script src="js/shiro.js"></script>

	<script>
	docReady(
	addPageEditLink()
	);
	</script>
	<script>hljs.highlightAll();</script>

	</body>
	</html>