tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Tim Funk <>
Subject Re: j_security_check/ Realm question
Date Wed, 17 Nov 2004 11:31:54 GMT
See section SRV.12.3 Programmatic Security of the Servlet spec for the role 
link question.

As for the welcome page - the spec wasn't meant to handle cases like this. 
The container protects resources. Once you try to access a protected resource 
- you mustr authenticate. Then you are passed to the protected resource, not 
to a different page.

-Tim wrote:
> Hi, 
> I have a question for webapplication  developer ,
> I have already applied JDBcRealm  but im  confused between the security - 
> constraints in the web.xml   and the realm 
> because in web.xml also web.xml we declare the security roles and  also in 
> database table so if we have say  5-10 differernt kind of users do we need 
> to declare them in web.xml and  also to create them in database ??
> My second question is after the application authentication type  "FORM" my 
> action is  =j_security_check   how ever in i want to direct the user to 
> some  welcome jsp after  succcessful log  where do i need to mention 
> that??
> your help is appreciated 
> thanks 
> regards 

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message