Hi Suresh,

You can protect your resources of the application by a simple technique. Just have
a login page, where you ask for the login info from the user. In the background,
if the information provided is correct, start a new session variable. On the
subsequent pages, which are to be protected, just check the value of this session
variable. If this is null, redirect to login page.

Hope it helps.

Rajneesh

gsuresh wrote:

> Hi all,
>   Currently i am working in providing security for Intranet of the company.  I
> am using Jigsaw for developement.
>   Intranet has 100's of pages, I don't want anyone to  view any of the pages
> withou logging into the servlet.  Now if the user knows the url of any of the
> page directly he is able to view that by directly typing in that.
> for ex:
>   If my login servlet is list http://example:8001/servlet/IntranetMain and if
> the user types in this and does the operations he is able to view the pages.
> But if he know the url of the particular page then he can directly typin as
> http://example:80011/servlet/xxx/xx/yy.html
> which also displays him the page directly.
> I need immediate reply from any one whose has idea about this, i am in urgent
> need of the solution.
> with regards,
> suresh kumar.G
>
> ___________________________________________________________________________
> To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
> of the message "signoff SERVLET-INTEREST".
>
> Archives: http://archives.java.sun.com/archives/servlet-interest.html
> Resources: http://java.sun.com/products/servlet/external-resources.html
> LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to