Hi,
 
I have an application that has a single servlet. That servlet receives two mandatory paramenters: Screen and Action (i,e main?scree=user&action=show). I also have an xml file that describes the role that the user needs to be in in order to access the screen:
 
Screen     Action   Role
user       new     guest
user       create  guest
user       show    user
user       update   user
user       remove  admin
message    new     guest
message    send     user
message    view     guest
....
 
 
I would like tomcat to verify that the user is authenticated for the specified role based on this table. The role guest does not need authentication.
 
Thanks
Hector

Reply via email to