[JBoss-user] Jetty and form based authentication

2003-02-25 Thread Silvester van der Bijl
Hello, I'm (still) trying to implement a web application for my school project. The idea is that everybody is allowed to see e.g. the default page (news), but only authenticated users can e.g. access grades. So far, no problem. The web application builds up a menu based on the roles the user

Re: [JBoss-user] Jetty and form based authentication

2003-02-25 Thread Silvester van der Bijl
I just found my answer on the jboss forums. It seems jetty is supposed to return null in getUserPrincipal on unprotected pages. Solution seems to be to create a special guest role which is granted to all visitors by the login module and make every resources protected. Silvester citaat

Re: [JBoss-user] Jetty and form based authentication

2003-02-25 Thread Silvester van der Bijl
Not if understand the messages at the forum correctly. You can configure a role to be granted to unauthenticated users. Thanks for the input, Silvester citaat van=David Ward But then everyone would have to log in to access any of your pages. If you need to know who the user is on all pages