Hi,
I have an application that has a single servlet.
That servlet receives two mandatory paramenters: Screen and Action (i,e
main?scree=user&action=show). I also have an xml file that describes the
role that the user needs to be in in order to access the screen:
Screen Action
Role
user
new guest
user
create guest
user
show user
user update
user
user
remove admin
message
new guest
message
send user
message
view guest
....
I would like tomcat to verify that the user is
authenticated for the specified role based on this table. The role guest does
not need authentication.
Thanks
Hector
|