> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Rod > Macpherson > Sent: Wednesday, February 26, 2003 9:29 PM > To: [EMAIL PROTECTED] > Subject: Re: [JBoss-user] Form based authentication > > > >> ... If I understand you correctly you don't use container managed > security (web.xml) and you verify usernames and password against > yourself ? > > Here are some situations where container managed security is not > necessarily > the best choice: > > 1. It's 5:00 PM users in group X are forbade from posting. > 2. Alice is in the penalty box for a week for violating the TOS. > 3. Host foo.bar.com has exceeded its access quota for the day. > 4. Bob is now listed in the Big Spenders table so enable > high-markup pages. > > Using roll-your-own security can be developed using the same > easy-to-manage > aspect-oriented techniques as deployment descriptors but without the > restrictions. Also, a lot of times you want a power user or manager to > control security versus the application deployer. >
Yes, Scott, when he teaches, always promotes the use of interceptors for these types of security requirements. Servlets have filters, CORBA has PortableInterceptors, I wish EJB had something standard. Bill > ----- Original Message ----- > From: "Guy Rouillier" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, February 25, 2003 10:55 PM > Subject: Re: [JBoss-user] Form based authentication > > > > ----- Original Message ----- > > From: "Silvester van der Bijl" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Tuesday, February 25, 2003 8:45 PM > > Subject: Re: [JBoss-user] Form based authentication > > > > > > Hello, > > > > >>You're doing exactly what I want to do, only I want to use container > > managed security. If I understand you correctly you don't use container > > managed security (web.xml) and you verify usernames and password against > > e.g. a dabase yourself ?<< > > > > Yes. > > > > > > > > > > > > ------------------------------------------------------- > > This SF.net email is sponsored by: Scholarships for Techies! > > Can't afford IT training? All 2003 ictp students receive scholarships. > > Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more. > > www.ictp.com/training/sourceforge.asp > > _______________________________________________ > > JBoss-user mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/jboss-user > > > > ------------------------------------------------------- > This SF.net email is sponsored by: Scholarships for Techies! > Can't afford IT training? All 2003 ictp students receive scholarships. > Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more. > www.ictp.com/training/sourceforge.asp > _______________________________________________ > JBoss-user mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/jboss-user ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
