Re: [JBoss-user] Form based authentication

[Gary S. Cuozzo]

You can do quite a bit (if you authenticate via SQL database) with views to implement similar features while using container managed security.  I have several criteria that go into deciding whether or not a user can authenticate to my app, and they all get accounted for with my view.  The view presents the container with the simple user/role structure that it wants, but the underlying data is more complex than that and encompasses multiple tables.

Dunno how this would work if you don't have a SQL DB though (like LDAP or other mechanism).

gary.


Rod Macpherson wrote:

... If I understand you correctly you don't use container managed
      

security (web.xml) and you verify usernames and password against yourself ?

Here are some situations where container managed security is not necessarily
the best choice:

1. It's 5:00 PM users in group X are forbade from posting.
2. Alice is in the penalty box for a week for violating the TOS.
3. Host foo.bar.com has exceeded its access quota for the day.
4. Bob is now listed in the Big Spenders table so enable high-markup pages.

Using roll-your-own security can be developed using the same easy-to-manage
aspect-oriented techniques as deployment descriptors but without the
restrictions. Also, a lot of times you want a power user or manager to
control security versus the application deployer.

----- Original Message -----
From: "Guy Rouillier" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, February 25, 2003 10:55 PM
Subject: Re: [JBoss-user] Form based authentication


  

----- Original Message -----
From: "Silvester van der Bijl" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, February 25, 2003 8:45 PM
Subject: Re: [JBoss-user] Form based authentication


Hello,

    

You're doing exactly what I want to do, only I want to use container
        

managed security. If I understand you correctly you don't use container
managed security (web.xml) and you verify usernames and password against
e.g. a dabase yourself ?<<

Yes.





-------------------------------------------------------
This SF.net email is sponsored by: Scholarships for Techies!
Can't afford IT training? All 2003 ictp students receive scholarships.
Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more.
www.ictp.com/training/sourceforge.asp
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user
    

-------------------------------------------------------
This SF.net email is sponsored by: Scholarships for Techies!
Can't afford IT training? All 2003 ictp students receive scholarships.
Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more.
www.ictp.com/training/sourceforge.asp
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user