Getting Started with ALES 3.0

Overview

This section contains the following topics:
Scenario
Requirements

Scenario

This document provides five tutorials that collectively demonstrate some of the basic steps involved in securing applications using ALES 3.0.

The tutorials address a simple, yet realistic use-case scenario. The Admissions Department at Parker Hospital maintains a web-based Patient Roster that provides information about currently admitted patients. Using ALES, the Patient Roster can be secured by policies that control who may access it, under what conditions, and what rights they have when they do so.

In successive steps the tutorials demonstrate how to install the Administration server, launch the Entitlements Management Tool, and use it to:

Define the Patient Roster in ALES.
Define Users and Groups that model who uses the Patient Roster.
Define a Membership rule that assigns a Role used to secure the Patient Roster.
Define Authorization policies that secure access to and privileges on the Patient Roster.
Audit and monitor the policies in place.

Requirements

In order to follow the tutorials, you must first install a supported servlet container and database.

Servlet Containers:

WebLogic Server 10.0 MP1, 9.2 MP2, or 8.1 SP5/SP6
Apache Tomcat 5.5.23

Databases:

Oracle 9.2.0.5, 10.1.2, 10.2.0.2
Sybase 12.5.3, 15
MS-SQL 2000 & 2005 (with MS-SQL 2005 driver)

Note: MS-SQL 2000 driver is not supported.

PointBase 5.1
IBM DB2 Universal DB Enterprise Server 9.1

For detailed information about supported products, see the Administration Server Installation Guide.