Our aim when designing Illumination was to provide a good balance between rigorous security and ease of use. Passwords for each user. Restricted access to whole sections of the intranet. Restricted access to individual servlets.
Illumination maintains a list of current users and user groups.
Each user has a password, which is stored in encrypted form on the Illumination server. The intranet administrator is provided with a simple web page to manage these lists, allowing them to add, edit and delete users. Each user also has the capability to change their own password via a page in their configuration section. Only when valid details have been entered can the user proceed to the main page. Controlling access Using standard Apache features, it is also possible to restrict access to particular sections of the intranet to only specified groups or users.